PHP准备语句用户更改密码

这是更改密码页面的html代码。当我从用户注册表中单击“更改密码”时，它会将我带到这里，它工作得很好，但当您使用用户更改密码选项直接将您带到此处时，保存它不起作用。我相信它必须将用户ID作为键来处理，因为从表中选择的是通过ID。但是当我使用设置-用户更改密码时，保存密码更改后它不会做任何事情，它不会反映任何事情

<div class="col-lg-6">
    <div class="col-sm-12">
    <br/>
    <h3 class="page-title">Change Password</h3>
</div>
<div class="card-box">
    <div class="form-group">
        <label for="userName">User Name</label>
        <input type="text" name="uname" parsley-trigger="change" required placeholder="Enter user name" class="form-control" id="uname" name="uname" value="<?php echo $actordetails->ACT_USERNAME;?>" readonly >
    </div>
    <div class="form-group">
        <label for="pass1">New Password<span style="color:#F00">*</span></label>
        <input id="pass1" type="password" placeholder="Password" name="inputpassword" required class="form-control">
    </div>
    <div class="form-group">
        <label for="passWord2">Confirm New Password <span style="color:#F00">*</span></label>
        <input data-parsley-equalto="#pass1" type="password" required placeholder="Password" class="form-control" id="password2">
    </div>

    <div class="form-group text-right m-b-0">
        <button class="btn btn-success waves-effect waves-light" type="submit" onclick="document.getElementById('viewpage').value='savepwd';document.getElementById('view').value='';document.getElementById('fdsearch').value='';document.myform.submit()">
                        Save
        </button>
        <button class="btn btn-default waves-effect waves-light m-l-5" onclick="document.getElementById('view').value='';document.getElementById('viewpage').value='';document.myform.submit()">
                        Cancel
        </button>
    </div>
 </div>
</div>
</form > 

修改密码
用户名
为什么在这里标记MySQL和SQL Server？你到底用的是哪一种？此外，您的代码意味着您正在数据库中存储纯文本密码；我希望你不是。好的代码缩进将帮助我们阅读代码，更重要的是，它将帮助你为自己的利益调试代码。您可能会被要求在几周/几个月内修改此代码，最终您会感谢我。我使用Mysql，并且没有将纯文本密码存储到我的数据库中，我有一个引擎代码，可以在存储到数据库之前对您输入的代码进行加密。在进入数据库之前，先对其进行腌制和哈希处理
<?php
$crypt = new cryptCls();

switch(strtolower($viewpage)) {
    case "changepwd":

        print_r($_POST);

        $stmt = $sql->Execute($sql->Prepare("
                            SELECT ACT_USERNAME,ACT_ID 
                            FROM gm_actors   
                            WHERE ACT_ID=".$sql->Param('a')),array($keys));
        print $sql->ErrorMsg();
        if($stmt->RecordCount()>0){
            $editobj = $stmt->FetchNextObject();
            $uname = $actordetails->ACT_USERNAME;
        }

        break;

    case "savepwd":
        print_r($_POST);

        $duplicatekeeper = $session->get("post_key");
        if($action_key != $duplicatekeeper){
            $session->set("post_key",$action_key);
            if(!empty($inputpassword) && !empty($keys) ) {
                $inputpassword = $crypt->loginPassword($uname,$inputpassword);

                $stmt = $sql->Execute($sql->Prepare("
                            UPDATE gm_actors 
                                SET ACT_USERPASSWORD=".$sql->Param('b')."           
                            WHERE ACT_ID=".$sql->Param('d')." "),
                        array($inputpassword,$actordetails->ACT_ID));
                $msg = "Password has been changed successfully.";
                $status = "success";

                // $activity = ' Agent'.$keys.' password changed .';
                // $engine->setEventLog("032",$activity);

            }else if($inputpassword!==$confirmpassword){
                $msgs="Sorry! Passwords Do not Match.";
                $target ='changepwd';
            } else {

               $msg = "Unsuccessfully: All fields are required.";
                      $status = "error";
                      $view ="changepwd";
              }
        }
        break;
}

$stmtusers = $sql->Execute($sql->Prepare("
                SELECT ACT_SURNAME,ACT_ID,ACT_OTHERNAMES,
                        ACT_USERNAME,ACT_STATUS,ACT_EMAIL,ACT_PHONE,
                        ACT_ACCESS_LEVEL,ACL_NAME 
                FROM gm_actors 
                    left join gm_actors_level on ACT_ACCESS_LEVEL=ACL_NUMBER  
                WHERE ACT_ACCESS_LEVEL !='1' 
                AND ACT_STATUS !='4' 
                ORDER BY ACT_SURNAME "));
print $sql->ErrorMsg();


include("model/js.php");
include('public/alertmessage/message.php');
?>