<%@ language="VBScript"%>
<% response.buffer=true %>
My Account
<%
fail=1
if(request.queryString("act")="update") then
set rsp = con.execute("select *from userinfo where username='" & trim(session("curuser")) & "' and password='" & trim(request.form("oldpwd")) & "'")
if(rsp.eof=true) then
session("login")="no"
fail=0
else
session("login")="yes"
session("curuser")=rsp("username")
session("curname")=rsp("fname")
con.execute("update userinfo set password='" & trim(request.form("newpwd1")) & "' where username='" & trim(session("curuser")) & "'")
fail=2
end if
end if
%>