<!--#include file=conn.asp-->

<%  
			
			 dim rs
			 	set rs=server.CreateObject("adodb.recordset")
			 	strSql="Select user_id From user where username='" & request.Cookies("xingxing")("username") &"'"
				rs.open strSql,conn
				user_id=rs(0)
				
			 
			    Dim strSql,varPassword
			 	varPassword=Request.Form("password") 
				
				
				strSql="Update user set password='"& varPassword &"'where user_id="& user_id 
				conn.Execute(strSql) 
				Response.Redirect "right1.asp" 
				
				rs.close
				set rs=nothing
				closedb
				
		%>