<!--#include file="conn.asp"-->
<!--#include file="../MD5/md5.asp" -->

<%
set rs=server.createobject("adodb.recordset")
sql="select * from users where userid='"&request.cookies("userid")&"' and password='"&request.cookies("password")&"'"

rs.open sql,conn,1,3
if request("password")<>"" then
rs("password")=md5(request("password"))
end if
rs("name")=request("name")
rs("email")=request("email")
rs("sex")=request("sex")
rs("province")=request("province")
rs("homeaddress")=request("homeaddress")
rs("phone")=request("phone")
rs.update

if request("password")<>"" then
response.cookies("password")=md5(request("password"))
else
response.cookies("password")=rs("password")
end if
response.redirect "../chageusr.asp?id="&request("id")
rs.close
set rs=nothing
conn.close
set conn=nothing
%>
</body>
</html>