<?php
	if (isset($_POST["un"]))
	{
		$un=$_POST["un"];
		$psh=$_POST["psh"];
		$ps=$_POST["ps"];
	}
	else
	{
		$un="";
	}
	if ($un=="")
	{
		print("ERR");
	}
	else
	{
		include("../conn.php");
		$chk="";
		$dq=mysqli_query($db, "SELECT * FROM `sak` WHERE `admin`='".$un."' AND `ps`='".$psh."' LIMIT 1;");
		while($res=mysqli_fetch_row($dq))
		{
			$chk=$res[0];
		}
		if ($chk=="")
		{
			print("ERR");
		}
		else
		{
			$pnew=sha1($ps);
			$uq=mysqli_query($db, "UPDATE `sak` SET `ps`='".$pnew."' WHERE `i`='".$chk."';");
			if ($uq)
			{
				print("OK");
			}
			else
			{
				print("ERR");
			}
		}
	}
?>