[kh99]

OK, then for the password check part you'd want something like:

PHP Code:

if ($_POST['do'] == 'confirmpassword')
{
       $vbulletin->input->clean_array_gpc('p', array(
        'currentpassword'        => TYPE_STR
    ));
    if (md5(md5($vbulletin->GPC['currentpassword']).$vbulletin->userinfo['salt']) == $vbulletin->userinfo['password'])
    {
       exec_header_redirect('yes.php');
    }
    else
    {
       exec_header_redirect('no.php');
    }
} 


I haven't studied the overall approach so I can't say this is going to work, but the password checking part should be close to correct.

BTW, I used clean_array_gpc above even though it's cleaning only one input (there is a function to do a single input) because I figure you might have other fields to check. If not, it doesn't really hurt anything.