function password_change($js){
  global $ar,$db;
  $dt=array();
  $dt['param']=$js;

  //cek pass lama valid
  $sql9="SELECT * from `petugas` where password='".md5($js['password'])."' and id=".$js['uid'];
  //$dt['sql'][0]=$sql9;
  $res9=mysqli_query($db,$sql9);
  if(mysqli_num_rows($res9)==1) {
    $r9=mysqli_fetch_assoc($res9);
    $sql8="UPDATE `petugas` set `password`='".md5($js['newpassword'])."',update_at=".time()." where `id`='".$js['uid']."'";
    //$dt['sql'][1]=$sql8;
    $res8=mysqli_query($db,$sql8);
    $dt['success']=true;
    $dt['message']="Password sukses diperbarui";    

  } else {
    $dt['error']=true;
    $dt['massage']='Password lama tidak cocok';
  }
  return $dt;
}