<%response.expires =0 session("author")="ncaids" if session("cdcuser")<>1 or session("chkuser")="" then response.redirect "index.asp" end if %> <% oldname=trim(request.form("oldname")) oldpwd=trim(request.form("oldpwdsd")) newpwd=trim(request.form("newpwdsd")) newpwdre=trim(request.form("newpwdresd")) if newpwd <> newpwdre then response.redirect "vip_vipedit.asp?editnum=2&errnum=1" end if sql ="select * from viplist where vip_name='"& oldname &"'" openrs rs,sql,1,2 if rs("vip_pwd")<>oldpwd then response.redirect "vip_vipedit.asp?editnum=2&errnum=2" end if rs("vip_pwd")=newpwd rs.Update rs.close set rs=nothing set conn=nothing response.redirect "vip_vipedit.asp?editnum=2&errnum=3" %>