--- a/change_password.php	Mon Mar 03 20:32:33 2008 +0000
+++ b/change_password.php	Mon Mar 10 19:15:59 2008 +0000
@@ -21,9 +21,9 @@
 
 require_once("inc/toolkit.inc.php");
 
-if($_POST["submit"])
+if(isset($_POST["submit"]))
 {
-	if(strlen($_POST["newpass"]) < 8)
+	if((!isset($_POST['newpass'])) || (strlen($_POST["newpass"]) < 8))
 	{
 		error('Password length should be at least 8 characters.');
 	}