<%
action=request("action")
set rs=server.createobject("adodb.recordset")
%>
<%=webname%>-取回密码
<%
if action="two" then
answer=request("answer")
if answer="" then
%>
<%
response.end
end if
if answer<>session("answer") then
%>
<%
response.end
end if
pass=session("pass")
%>
<%
end if
if action="one" then
name=request("name")
if name="" then
%>
<%
response.end
end if
sql="select * from user where name='"&name&"'"
rs.open sql,conn,1,1
if rs.bof or rs.eof then
%>
<%
response.end
end if
question=rs("question")
session("answer")=rs("answer")
session("pass")=rs("pass")
rs.close
%>
<%
end if
if action="" then
%>
<%end if%>