You can use AJAX to check if the current password is correct before enabling the 2 new password text boxes.
Also, why do you need a "Don't know password?" link?. If they don't know their password, how did they log in in the first place to get to the change password form
Normally you would have a "Don't know password?" link on the login page.