Record po = getCurrentUser();
Employee e = Employee.dao.findById(po.get("id"));
String pwd1 = e.getStr("pwd");
if (MD5.getMD5ofStr(oldpwd).equals(pwd1)) {
e.set("pwd", MD5.getMD5ofStr(pwd));
e.update();
toDwzJson(200, "重置密码成功!密码为<br><h3><b style='color:red;'>" + pwd
+ "</b></h3><br>请牢记!");
} else {
toDwzJson(300, "旧密码输入错误!");
}