begin
declare current_password varchar2(30);
        current_user     varchar2(30);
        x                number;
        ddl_string       varchar2(100);

begin

    current_password := upper(get_application_property(password));
    current_user     := upper(get_application_property(username));

    --if (:change_pass.old_password is null or :change_pass.new_password is null
    --	  or :change_pass.new_password_2 is null)then
    --	  null;
    if length(:change_pass.new_password) < 6 then
        x := show_alert('new_pw_too_short');
--don't validate old password if trying to change someone else's password, 
    elsif 
          (upper(:change_pass.old_password) != current_password
          or upper(:change_pass.old_password)is null) then
           x := show_alert('incorrect_old_pw');
    elsif (upper(:change_pass.new_password) != upper(:change_pass.new_password_2)
    	    or upper(:change_pass.new_password)is null
    	     or upper(:change_pass.new_password_2)is null) then
              x := show_alert('not_verified');
          elsif upper(:change_pass.old_password) =  upper(:change_pass.new_password) then
                 x := show_alert('new_pw_same_as_old_pw');
             else
                 ddl_string := 'alter user '|| upper(:change_pass.current_username) ||
                               ' identified by '||'"'|| upper(:change_pass.new_password)||'"';
-- uncomment when Oracle 8 --> dbms_utility.exec_ddl_statement(ddl_string);
                 forms_ddl(ddl_string);
--
                 x := show_alert('password_changed');
                 exit_form;
             end if;

exception
    when others then
        if sqlcode = -01031 then
            x := show_alert('no_privilege');
        else
            x:= show_alert('use_alphanumerics');
        end if;
end;
end;