Select Code to Download

....
if (tep_validate_password($password_current, $check_customer['customer
+s_password'])) {
        tep_db_query("update " . TABLE_CUSTOMERS . " set customers_pas
+sword = '" . tep_encrypt_password($password_new) . "' where customers
+_id = '" . (int)$customer_id . "'");
....

////
// This function makes a new password from a plain text password. 
...

    return $password;
  }

function tep_validate_password($plain, $encrypted) {
    if (tep_not_null($plain) && tep_not_null($encrypted)) {
// split apart the hash / salt
...
 
    return false;
  }