Password Update - Incorrect Password Validation Missing for Update Password Functionality

[ashrafiucse]

Description: When a user enters an incorrect current password and clicks on the "Update Password" button, the system displays a success message ("Password updated successfully") instead of validating the input and showing an appropriate error message. This creates confusion for the user and undermines security.

Severity: High Priority: Critical

Steps to Reproduce:

1. Navigate to the "Update Password" section.
2. Enter an incorrect current password in the "Current Password" field.
3. Fill in the "New Password" and "Confirm New Password" fields with valid inputs.
4. Click on the "Update Password" button.
5. Observe that the system displays "Password updated successfully" without validating the current password.

Expected Behavior: The system should:

1. Validate the "Current Password" against the stored password in the database.
2. If the current password is incorrect, display an error message like: "The current password you entered is incorrect."
3. Only update the password if the current password is correct and the new passwords match.

Actual Behavior: The system bypasses current password validation and displays a success message, even when the entered current password is incorrect.