<% username=request.form("username")
question=request.form("question")
answer=request.form("answer")
if username="" or isnull(username) or question="" or isnull(question) or answer="" or isnull(answer) then
session("err_msg")="<li><br>您输入输入的用户名、问题和答案不能为空!"
response.redirect "error.asp"
end if
set conn=server.createobject("adodb.connection")
DBPath = Server.MapPath("数据库")
conn.Open "driver={Microsoft Access Driver (*.mdb)};dbq=" & DBPath
set findpas=server.createobject("adodb.recordset")
sql="select * from 用户表 where username='"&username&"' and question='"&question&"' and answer='"&answer&"'"
findpas.open sql,conn,1,1
if not findpas.eof then
response.write "您的口令是:"&findpas("口令的字段")
end if
findpas.close
set conn=nothing
%>
至于 error.asp 是什么代码 那时你自己的了