diff --git a/includes/update-password.php b/includes/update-password.php
new file mode 100644
index 0000000..4ced42b
--- /dev/null
+++ b/includes/update-password.php
@@ -0,0 +1,21 @@
+prepare("SELECT userpass FROM userinfo WHERE userid = ?");
+$verifypass->bind_param("i", $_SESSION['userid']);
+$verifypass->execute();
+$result = $verifypass->get_result();
+while ($row = $result->fetch_assoc()) {
+ $vp = password_verify ($_POST['oldpass'],$row['userpass']);
+ if ($vp) {
+ $hp = password_hash($_POST['userpass1'], PASSWORD_DEFAULT);
+ echo 'Verified old password, updating to new password!
';
+ $updpass = $con->prepare("UPDATE userinfo SET userpass = ? WHERE userid = ?");
+ $updpass->bind_param("si", $hp, $_SESSION['userid']);
+ $updpass->execute();
+ echo 'Password updated!
';
+ $updpass->close();
+ } else {
+ echo 'Old password doesn\'t match, password is NOT updated!
';
+ }
+}
+?>
\ No newline at end of file