escape ($password), $mysql->escape ($username)); if ($mysql->query ($query)) { $pw_message = "Password changed.\n"; } else { message ($mysql->error); } } unset ($_POST['set_password1'], $_POST['set_password2'], $password); } ?>