LittleDemon WebShell

<?php
if ((!isset($_SESSION['gen256']))  ) {
  echo "<script>
        window.open('login.php','_self');
    </script>";  
}

?>
 <div class="row">
  
    <div class="col-lg-12">
        <div class="panel panel-default">
            <div class="panel-heading">
                Edit Refugees
            </div>

              <div class="panel-body">


<div class="row">
                    <div class="col-lg-12">

<form method="post">


    <div class="form-group">
  <label>Old Password:</label>
  <input type="password" class="form-control"  name="oldpass" required>
</div>

<?php
             $pid=$_SESSION['gen256']['id'];
                $query="SELECT * FROM users WHERE(id='$pid')";
                $result = mysqli_query($conn,$query);
                $count = 1;
                while($row = mysqli_fetch_assoc($result) ){
                    $did = $row['id'];
                    $dpass = $row['password'];
                    $name = $row['fname'];
                    $oname = $row['oname'];
                   
                
                    ?>

                    <input type="hidden" value="<?php echo $dpass;?>" name="oldpass1">
                    <?php
                    $count ++;
                }
            ?> 

 <div class="form-group">
  <label>New Password:</label>
  <input type="password" class="form-control"  name="newpass" required>
</div>

<br>
<input type="submit" name="submit" value="Change Password">

    

</form>
</div></div>
</div>
</div></div></div>




 <?php 
         if (isset($_POST['submit'])) {
            $uid=$uid=$_SESSION['gen256']['id'];
            $oldpass1 = $_POST['oldpass1'];
            $oldpass = $_POST['oldpass'];
            $newpass = $_POST['newpass'];

            $newpass1=sha1($newpass);
            $newpass2=md5($newpass1);

            $pass1=sha1($oldpass);
            $oldpass2=md5($pass1);

            if ($oldpass1==$oldpass2) {
                
                $sql = "UPDATE users SET password='$newpass2' WHERE id='$uid'";

    
    mysqli_query($conn,$sql);
     echo "<script>alert('User password Updated')</script>";
            }else{
                echo "<script>alert('Old Passwords Do not Match')</script>";
            }
           




         }
     ?>