OverLord Shell

<?php session_start();
if(!isset($_SESSION['company_id']) || !isset($_SESSION['company_name'])){session_destroy();echo "login.php";exit;}
if(!in_array(18,$_SESSION['role'])){echo "404.php";exit;}
if($_SERVER['REQUEST_METHOD']!='POST' || empty($_POST)){echo "404.php";exit;}
require_once("../db/conn.php");

$uid=$_POST['uid'];
$password=md5($connection->real_escape_string(trim($_POST['password_confirmation'])));
$password2=md5($connection->real_escape_string(trim($_POST['password'])));

if($password==$password2){
	$updateq="UPDATE busdir_mst_users SET password='$password',modifiedby='".$_SESSION['company_id']."' WHERE usersrno=".$uid;
	$updater=$connection->query($updateq);
	if($updater)echo "success";
	else echo "An unknown error occured. Please try again.";
}
else echo "Passwords DO NOT match.";
$connection->close();
?>