<head>
<title></title>
</head>
<body bgcolor="#EFEFFF">
<!--#include file="conn.asp"-->
<%
User=chkstr(trim(request.form("Username")),14)
Pass=chkstr(trim(request.form("oldPassword")),25)

Pass0=chkstr(trim(request.form("newPassword0")),25)
Pass1=chkstr(trim(request.form("newPassword1")),25)
set rs = Server.CreateObject("ADODB.Recordset")
rs.Open "Select * From admin where username='"&user&"' AND pass='"&pass&"'",conn,1,3

if rs.eof then 
rs.close
%><br><br><br>
         <p align="center"><font color="#FF0000"> 错误：该用户不存在或密码错误！</font></p>

<p align="center">

  	<input type="button" value="返回" name="B3" onclick="javascript:history.back()"> 
<%else   
	conn.Execute"UPDATE admin set pass= '"&pass0&"' where username='"&user&"' AND pass='"&pass&"'"
	rs.close  %> 
	 <br><br><br>
         <p align="center"><font color="#FF0000"> 您的密码修改成功！</font></p> 
 
<p align="center">

  	<input type="button" value="关闭" name="B3" onclick="window.close()"> 
	
	
	<% 
   
end if%>   
           
