<!--#include file=conn.asp-->
<%
dim pw0,pw,message
  pw0=trim(request("password0"))
    pw=trim(request("password"))
	
set rs=server.CreateObject("adodb.recordset")
rs.open "select password from [admin] where username='"&session("admin")&"'",conn,1,3
if rs("password")<>pw0 then
call usererr()
else
rs("password")=pw
rs.update
rs.close
set rs=nothing
message="修改成功！"
sub usererr()
message="對不起,原密碼錯誤!"
end sub
end if
response.redirect"adduser.asp?message="&message

%>