<%
if request.Form("button") ="提交" then
ppp=conn.execute("select count(*) from [user] where loginID='"&session("loginID")&"' and password='"&request.Form("oldpwd")&"'")(0)
if ppp>0 then
sql="update user set password='"&request.Form("pwd")&"' where loginID='"&session("loginID")&"'"
conn.execute(sql)
%>
<script>
alert("密码修改成功");
location.href("modifypwd.asp");
</script>
<%
response.End()
else
%>
<script>
alert("原始密码错误");
location.href("modifypwd.asp");
</script>
<%
response.End()
ppp=conn.execute("select count(*) from [user] where loginID='"&session("loginID")&"' and password='"&request.Form("oldpwd")&"'")(0)
if ppp>0 then
sql="update [user] set password='"&request.Form("pwd")&"' where loginID='"&session("loginID")&"'"
上面那个SQL语句user都加了[]括号,为什么下面update不加中括号?