File Manager

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>

<title>�к����ʹ�����͡�ú�����</title>
 
<meta http-equiv="Content-Type" content="text/html; charset=windows-874">

<link href="bsri2006.css" rel="stylesheet" type="text/css">
<link href="image/favicon.ico" rel="shortcut icon" type="image/x-icon">
</head>
<body>

<%
  txtpw = Request.Form("txtpw")
  txtpw2=request.form("txtpw2")
 username=session("username")
  type_login=session("type_login")
  date_mo=now
  
  if txtpw=txtpw2 then
					  if len(txtpw2)=10 then
					select case type_login
					case 1
						
					sql="select * from lecturer where login_name_l="&username&""
							tbl="lecturer"
							pw="password_l"
							rowss="id_lecturer"
							'set orsall=server.createobject("adodb.recordset")
							'orsall.open sqlall,conn,1,3
							'if not orsall.eof then
									
							'end if
					case 2
					sql="select * from student where id_stu='"&username&"'"
							tbl="student"
							pw="password_s"
							rowss="id_stu"

case 3
					sql="select * from staff where id_staff="&username&""
									tbl="staff"
							pw="password_st"
							rowss="id_staff"
					  end select

'sql = "select * from student where id_stu = '" & username & "' "
					'response.write "stu"

Set ors = Server.CreateObject("ADODB.Recordset")
						ors.Open sql, Conn, 1, 3
					' login_name_l=ors("login_name_l")
					'response.write login_name_l

if not ors.eof then
						result = ors(0)

'ors.Close
					  'set ors = nothing

if result > 0 then
											sqls="update "&tbl&" set "&pw&"='"&txtpw2&"' where "&rowss&"='"&username&"'"
											set orss=server.createobject("adodb.recordset")
											orss.open sqls,conn,1,3
											'if not orss.eof then
										   response.write sqls
										   'end if
										   %>

else
											Session.abandon
											%>

else%>
					<script language="javascript">	
					{
								alert('���ʼ�ҹ�����ҡѺ 10 ����ѡ�ùШ�� ');
									window.location.href='chapw.asp';
							}
							</script>
					<%

'Response.redirect "login_form.asp"
					end if
else
%>
<script language="javascript">	
{
			alert('���ʼ�ҹ��� �Ѻ �ǹ���ʼ�ҹ��� ���ç�ѹ�Ш�� ');
				window.location.href='chapw.asp';
}
		</script>
<%

end if

%>
</body>

File Manager

Editing: change_password_action.asp