LittleDemon WebShell

<?php 
include('../config.php');
if(isset($_POST['submit']))
{
$npas=$_POST['npas'];
session_start();
$query="update admin_login set Password='$npas' where a_id='".$_SESSION['samaj_admin']."'";
$result=mysqli_query($link,$query);
if($result)
header('location:home.php?err=1');
else
header('location:password.php?err=Passwords are not matched');
} 
include('header.php');
 ?>
    <div class="loginBox" style="margin-top:10%">  

        <div class="loginHead">
           <p style="color:#ffffff; font-size:14px">Change Password</p>
        </div>
        <form class="form-horizontal" action="password.php" method="POST">            
            <div class="control-group">
                <label for="inputPassword">New Password</label>                
                <input type="password" name="npas" id="inputPassword"/>
            </div>
           
            <div class="form-actions">
                <button type="submit" value="s" name='submit' class="btn btn-block">Update</button>
            </div>
        </form>        
      <?php
	 if(isset($_GET['err']))
	 {
	 $error=$_GET['err'];
echo "<br>";
echo "&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;$error";
	 }
	  ?>  
    </div>    
    

        
<?php include('footer.php');?>