FUNCTION CHECK_DB_PASSWORD( P_USER_NAME IN VARCHAR2, P_PASSWORD IN VARCHAR2 )
    RETURN BOOLEAN
    IS
      SUCCESS_I PLS_INTEGER := - 1 ;
      P_USER_CT PLS_INTEGER;
      L_STMT VARCHAR2(  255  );
      L_OLD_PASSWORD VARCHAR2(  30  );
      L_NEW_PASSWORD VARCHAR2(  30  );
      L_ACCOUNT_STATUS VARCHAR2(  32  );
      L_EXPIRY_DATE DATE;
      L_USER_NAME VARCHAR2(  256  );
      L_PASSWORD VARCHAR2(  256  );
    BEGIN
      IF P_USER_NAME IS NULL OR P_PASSWORD IS NULL THEN
         RETURN FALSE;
       ELSE
         L_USER_NAME := WWV_FLOW_ASSERT.SIMPLE_SQL_NAME( P_USER_NAME );
         L_PASSWORD := WWV_FLOW_ASSERT.NOOP( P_PASSWORD );
      END IF;
      IF LENGTH( L_PASSWORD ) >  30  OR INSTR( L_PASSWORD, '"' ) >  0  OR INSTR( LOWER( L_PASSWORD ), 'chr(34)' ) >  0  THEN
         RETURN FALSE;
      END IF;
      BEGIN
         SELECT account_status into l_account_status
        from sys.dba_users
       where username = l_user_name
        and account_status NOT LIKE 'LOCKED%';
       EXCEPTION
         WHEN NO_DATA_FOUND THEN
            RETURN FALSE;
      END;
      BEGIN
         SELECT password,expiry_date into l_old_password,l_expiry_date
        from sys.dba_users
       where username = l_user_name;
       EXCEPTION
         WHEN NO_DATA_FOUND THEN
            RETURN FALSE;
      END;
      L_STMT := 'ALTER USER "' || L_USER_NAME || '" IDENTIFIED BY "' || L_PASSWORD || '"';
      EXECUTE IMMEDIATE L_STMT;
      BEGIN
         SELECT password into l_new_password
        from sys.dba_users
       where username = l_user_name;
       EXCEPTION
         WHEN NO_DATA_FOUND THEN
            RETURN FALSE;
      END;
      IF ( L_OLD_PASSWORD != L_NEW_PASSWORD ) THEN
         L_STMT := 'ALTER USER "' || L_USER_NAME || '" IDENTIFIED BY VALUES''' || L_OLD_PASSWORD || '''';
         EXECUTE IMMEDIATE L_STMT;
      END IF;
      IF ( L_ACCOUNT_STATUS LIKE 'EXPIRED%' AND L_EXPIRY_DATE IS NULL ) OR L_EXPIRY_DATE < SYSDATE THEN
         L_STMT := 'ALTER USER "' || L_USER_NAME || '" password expire';
         EXECUTE IMMEDIATE L_STMT;
      END IF;
      RETURN L_OLD_PASSWORD = L_NEW_PASSWORD;
      RETURN FALSE;
   END CHECK_DB_PASSWORD;