aspÃÜÂëÐÞ¸ÄÎÊÌâ - Web ¿ª·¢ / ASP

ÏÖÔÚµÄÎÊÌâÊDz»¹ÜÄãÊäÈëʲô£¬µã¡°È·¶¨¡±¾ÍÖ±½ÓÊÇÏÔʾ¡°ÇëÖØÐÂÊäÈëÍêÕûµÄÐÅÏ¢£¡¡±£¬»¹ÓÐÐè²»ÐèÒªÔÚ½¨Ò»¸ö±í°üº¬£¨ÃÜÂ룬ÐÂÃÜÂ롣ȷÈÏÃÜÂ룩µÄ£¬²ËÄñµÄÎÒʵÔÚÊǸ㲻¶®£¬Çó¸÷λ¸ßÈË°ïæ°¡£¡£¡¼±~~~


<% 
  dim sql
  dim rs
   
%>

<%
  dim pass,username,pwd,newpwd,rnewpwd
  pass=session("password")
  username=request("user_ID")
  pwd=request("pwd")
  newpwd=request("newpwd")
  renewpwd=request("rnewpwd")
  If username="" or pwd="" or newpwd="" or renewpwd="" Then
  response.write "<script>alert('ÇëÖØÐÂÊäÈëÍêÕûµÄÐÅÏ¢£¡');history.back();</script>"
  End If
  If newpwd <> renewpwd Then
  response.write "<script>alert('ÐÂÃÜÂëÓëÈ·ÈÏÐÂÃÜÂë²»Ò»Ö£¬ÇëÖØÐÂÊäÈ룡');history.back();</script>"
  End If
  dim Strconn1
Strconn1="Driver={SQL Server};Server=127.0.0.1;Uid=dd;Pwd=111;DataBase=abc"
  set conn=server.CreateObject("ADODB.connection")
   
  conn.open Strconn1
  set rs=server.CreateObject("adodb.recordset")
   
  sql="select * from message where password='"&pwd&"' and user_ID='"