Help me with the Change password.php any one

Ok when i use the Change password i get this error But it allworks ok

Quote:

Warning: session_start() [function.session-start]: Cannot send session cache limiter - headers already sent (output started at C:\xampplite\htdocs\changepw.php:2) in C:\xampplite\htdocs\inc\class.captcha.php on line 46

I can't understnad what it is the part thats number 46 is

Quote:

if($hash1!= $curpass)

Here is all of it

PHP Code:


			
<script type="text/javascript" src="inc/md5.js"></script>

<?php

include('config.php');

  ?>

<form method="post">

<TABLE align="center">

<tr><td>

<br />

Enter the correct info and your password will be changed. For the email, it will be the one you used to sign up with.<tr><td>

<tr><td align="center">Login Name:</tr></td>

<tr><td align="center"><input type="text" size="20" name="userc"/></tr></td>

<tr><td align="center">Current Password:</tr></td>

<tr><td align="center"><input type="hidden" name="hash1">

<input type="password" size="20" name="curpass" onBlur="hash1.value=login(curpass.value)"/></tr></td>

<tr><td align="center">New Password:</td></tr>

<tr><td align="center"><input type="password" size="20" name="newpas"/></td></tr>

<tr><td align="center">Retype New Password:</td></tr>

<tr><td align="center"><input type="password" size=\"20\" name="renew"/></td></tr>

<tr><td align="center">

<input type="hidden" name="hash"><input class=Butt type=submit onClick="hash.value = login(newpas.value)" value="Change Password" name=B1>

</td></tr>

</TABLE>

</form>



<?php

            if($_POST['B1'])

            {

            mysql_select_db($mydbacc);

                    $userid = trim($_POST['userc']);

                    $password=trim($_POST['curpass']);

                    $passretype=trim($_POST['repass']);

                    $hash=$_POST['hash'];

                    $hash1=$_POST['hash1'];

                    $newpass = trim($_POST['newpas']);

                    $renewpass = trim($_POST['renew']);

                    $sql = "SELECT * FROM account WHERE name='$userid'";

                    $query = mysql_query($sql) or die(mysql_error());

                    $row = mysql_fetch_object($query);

                    $curpass = htmlspecialchars($row->password);



$res = mysql_query("select * from account where name = '".$userid."' order by id desc");

                                if(mysql_num_rows($res) == 0)

                                {

                                Echo "Sorry that username doesnt exist";

                                }else{

                if($hash1!= $curpass)

                    {

                        echo "Your current password was typed wrong";

                    }

                    else{

                    if($newpass != $renewpass)

                    {

                        echo "Your New paswords dont match";

                    }

                    else{

                    $sql = "UPDATE account SET password='$hash' WHERE name='$userid'";

                    $query = mysql_query($sql) or die(mysql_error());



                                    echo "Password Changed correctly ";



                                





                    }





                    }



}

}



            ?></div>