public String changePassword(String username, String oldPassword, String newPassword) {
    ResultSet rs = null;
    PreparedStatement ps = null;
    CustomerDBConnection db = new CustomerDBConnection();
    db.changePasswordLogin(username, oldPassword, newPassword);
    // Connection con = null;
    String res = " ";
    int rowcount;
    try {
      String query = "Select * from customer WHERE username = ? and password=?";
      ps = con.prepareStatement(query);
      ps.setString(1, username);
      System.out.println(username);
      ps.setString(2, oldPassword);
      System.out.println(oldPassword);
      rs = ps.executeQuery();
      while (rs.next()) {
        String query1 = "Update customer SET password= ? where username=? and password=?";
        ps = con.prepareStatement(query1);
        ps.setString(1, newPassword);
        System.out.println(newPassword);
        ps.setString(2, username);
        System.out.println(username);
        ps.setString(3, oldPassword);
        System.out.println(oldPassword);
        rowcount = ps.executeUpdate();
        // String res1 = "updated";
        if (rowcount > 0) {

          res = "true: updated successfully";

        } else {

          res = "false : Not updated";
        }
      }

    } catch (Exception e) {
      e.printStackTrace();
    } finally {
      try {
        ps.close();
        // rs.close();
        // con.close();
      } catch (SQLException e) {
        e.printStackTrace();
      }
    }
    return res;
  }