<%Option Explicit%>

<!--#include file="md5.asp"-->
<%
If session("admin")="ok" Then
   response.write"<script language='javascript'>"
   response.write"alert('系統(tǒng)現(xiàn)在處于登錄狀態(tài)，需要修改密碼請先退出系統(tǒng)！');"
   response.write"location.href='main.asp';"
   response.write"</script>"
Else
Dim UserName,UserPwd,UserPwd1,UserPwd2
UserName=trim(request.form("UserName"))
UserPwd=trim(request.form("UserPwd"))
UserPwd1=trim(request.form("UserPwd1"))
UserPwd2=trim(request.form("UserPwd2"))
  If UserName="" Or UserPwd="" Or UserPwd1="" Or UserPwd2="" Then
   response.write"<script language='javascript'>"
   response.write"alert('系統(tǒng)檢測到有非法參數(shù)輸入，無法完成操作！');"
   response.write"location.href='index.asp';"
   response.write"</script>"
  End If
%>
<!--#include file="conn.asp"-->
<%

Dim objRS,strSQL
set objRS=Server.CreateObject("ADODB.Recordset")
strSQL="select * from admin where UserName='"&UserName&"' and UserPwd='"&md5(UserPwd)&"'"
objRS.Open strSQL,objConn,1,3

  If objRS.RecordCount>0 Then
   objRS("UserPwd")=UserPwd1
   objRS.Update
   objRS.Close
   objConn.Close
   response.write"<script language='javascript'>"
   response.write"alert('密碼修改成功，請返回！');"
   response.write"location.href='index.asp';"
   response.write"</script>"
  Else
   objRS.Close
   objConn.Close
   response.write"<script language='javascript'>"
   response.write"alert('用戶名或密碼錯誤！');"
   response.write"location.href='index.asp';"
   response.write"</script>"
  End If
End If
%>