<%
dim Admin_ID,Admin_Name,Admin_User,Admin_Gps,Admin_Nps,Admin_Pas,Url
Admin_ID = Session("id")
Admin_Name = Session("user")
Admin_User = Request.Form("Admin_User")
Admin_Gps = Request.Form("Admin_Gps")
Admin_Nps = Request.form("Admin_Nps")
Admin_Pass = Request.form("Admin_Pass")
Url="admin.asp"
Set mRs=conn.execute("select * from admin where cstr(ID)='"&Admin_ID&"' and admin_pwd='"&Admin_Gps&"'")
If mRs.eof then
Response.Write ""
Response.End
else
set myConn=server.createobject("adodb.recordset")
sql="select top 1 * from admin where admin_name = '"&Admin_User&"'"
myConn.open sql,conn,0,1
if not myConn.eof then
Response.Write ""
Response.End
end if
myConn.Close
set myConn = nothing
End If
conn.execute("update admin Set admin_name='"&Admin_User&"',admin_pwd='"&Admin_Pass&"' where cstr(ID)='"&Admin_ID&"' and admin_pwd='"&Admin_Gps&"'")
Session.Contents.Remove("user")
Response.Write ""
Response.End
mRs.Close
set mRs = nothing
%>