Password changing from another source..

 if (strlen($chpassword) > 40)
                bark("Sorry, password is too long (max is 40 chars)");
        if ($chpassword != $passagain)
                bark("The passwords didn't match. Try again.");

define('PUN_ROOT', './punbb/');         ////Make sure you have directed to the right folder
require PUN_ROOT.'include/common.php';  ////For the Functions
define('PUN_QUIET_VISIT', 1);    ////Updates the users last log in date in the forum

        $ras = mysql_query("SELECT username, password, id, save_pass FROM punbb_users WHERE username = '$CURUSER[username]'");
        $raw = mysql_fetch_array($ras);

        $save_pass = $raw['save_pass'];
        $user_id = $raw['id'];
        $punbb = pun_hash($chpassword);
           mysql_query("UPDATE punbb_users SET password = '$punbb' WHERE username = '$CURUSER[username]'") or sqlerr(__FILE__,__LINE__);

        $expire = ($save_pass == '1') ? time() + 31536000 : 0;
        pun_setcookie($user_id, $punbb, $expire);




        $sec = mksecret();
        $passhash = md5($sec . $chpassword . $sec);

        $updateset[] = "secret = " . sqlesc($sec);
        $updateset[] = "passhash = " . sqlesc($passhash);
        logincookie($CURUSER["id"], $passhash);


        mysql_query("UPDATE users SET " . implode(",", $updateset) . " WHERE id = " . $CURUSER["id"]) or sqlerr(__FILE__,__LINE__);