<%@LANGUAGE="VBSCRIPT" CODEPAGE="936"%>
<!--#include file="UserConn.asp" -->
<%
newpass=NoSqlHack(Request.Form("newpass"))'新密码
uok=NoSqlHack(Request.Form("uok"))'答案
username=NoSqlHack(Request.QueryString("username"))'用户名
action=NoSqlHack(Request.QueryString("action"))
loste=NoSqlHack(Request.QueryString("loste"))
''''
 if action="pass" and len(loste)>10  and newpass<>"" and username<>"" Then
    Set rs = Server.CreateObject("adodb.recordset")
	rs.open"Select uid,uask from qvodcms_user where uname='"&username&"'",conn,1,1
	If not(rs.Eof and rs.bof) Then
	 Conn.Execute("Update qvodcms_user Set upass='"&md5(newpass,32)&"' where uid="&rs("uid")&"")
	 Call QvodCms_Err_Url("恭喜,密码修改成功！！！","../index.asp")
	 Response.End()
	 rs.close:Set rs=Nothing
	Else
	 Call  QvodCms_Err("新密码不能为空！！！")
     response.End()
	End If
 Else
 Call  QvodCms_Err("新密码不能为空！！！")
 response.End()
 End if
Call CloseConn()
%>
