dim user_name,strsql,rs,user_answer
user_answer=request.Form("user_answer")
user_name=request.QueryString("user_name")
strsql="select user_answer from [user_info] where user_name='"& user_name &"'"
set rs=conn.execute(strsql)
session("user_name")=user_name
if user_answerrs("user_answer") then
call msgbox("答案错误","Back","")
response.End()
end if
%>
请输入新密码:
conn.Close
Set conn=Nothing
%>