change password code in php

<?php
include('conn.php');

if(isset($_POST['loging']))
{
$query="select * from fersh_html where password='".$_POST['password']."'";
$result=mysql_query($query) or die(mysql_error());
$count=mysql_num_rows($result);
$row=mysql_fetch_object($result);
if($count>0)

    {
$update="update fersh_html set password='".$_POST['npassword']."' where id='$row->ID'";

        mysql_query($update) or die(mysql_error());

header('location:newtest.php');

}
else
    {

echo $error_msg='please eneter curret password';

}
}
?>