<!--#include virtual="/_appDB/db_connection.asp" -->
<!--#include virtual="/_appDB/functions.asp" -->
<!--#include virtual="/_appDB/api_functions.asp" -->
<!--#include virtual="/parents/scripts/admin_functions.asp" -->
<!--#include virtual="/parents/scripts/enc_function.asp" -->
<!--#include virtual="/parents/scripts/adm_inst.asp" -->
<%
StrError="None"
IF request("_np")<>"" THEN
	npass=sanitizeRequest("_np","form")
	IF len(npass) < 6 OR len(npass) > 30 THEN 
		StrError="Password appears invalid"
	ELSE
		acpwd=npass
	END IF
	IF str_parent_id <> "" AND IsNumeric(str_parent_id) THEN 
		'ok
	ELSE
		StrError="Invalid parent ID"
	END IF
	IF str_u_id <> "" AND IsNumeric(str_u_id) THEN 
		'ok
	ELSE
		StrError="Invalid school ID"
	END IF
	IF StrError <> "None" THEN
		'print the errors
		response.write("ERROR||"&StrError)
	ELSE	
		'update the account
		uSQL = "UPDATE cbk_parents SET "
		uSQL = uSQL & "`acpwd`='"&CustEncryptAndEncode(acpwd)&"', `first_login`='0'"
		uSQL = uSQL & "WHERE `parentID`='"&str_parent_id&"' AND `schoolID`='"&str_u_id&"' AND `first_login`='1' limit 1"
		dbCBK.Execute(uSQL)
		response.write("SUCCESS||")
	END IF
END IF
%>