<!--#include file=conn.inc-->
<%
user=request("user1")
id=request("id")
pass=request("pass")
tempre=request("tempre")
if user="" or pass="" or tempre="" then 
 response.write "请检查资料是否填写完整!"
else
 set rs1=Server.CreateObject("ADODB.Recordset")
 sql2="select * from user where id=1"
 rs1.open sql2,conn
 pass1=rs1("密码")
 user1=rs1("用户名")
rs1.close
set rs1=nothing

if pass<>pass1 or user<>user1 then
 response.write "用户名或密码错误!请重新输入!"
else
   set rs=Server.CreateObject("ADODB.Recordset")
   sql="select * from book where ID=" & id
   rs.open sql,conn,1,3
   rs("回复")=tempre
   rs.update
response.redirect "index.asp"
end if
end if
%>
