%@ Language="VBScript" %> <% Option Explicit %> <% '############################################################################################ '## ## '## ## '## VEETRON .COM ## '## ## '############################################################################################ %> <%Dim username,msg,usr,mnt,dte,yr,dob,country username = Session("username") msg = Request.Querystring("msg") usr = LCASE(Request.Form("username")) mnt = Request.Form("month") dte = Request.Form("date") yr = Request.Form("year") country = Request.Form("country") dob = dte & "/" & mnt & "/" & yr %> <%IF msg = "chk" Then%> <% IF usr = "" Then error("emptyuname") ELSEIF yr = "" Then error("emptyyr") ELSEIF country = "" Then error("emptycountry") ELSE Dim sqlp,rsPUser,pusr,pcountry,pdob,psquestion sqlp = "SELECT username,country,dob,sq FROM Users WHERE username = '" & usr & "'" Set rsPUser = Server.CreateObject("ADODB.Recordset") rsPUser.Open sqlp, dbconn, 3, 3 IF NOT rsPUser.BOF AND NOT rsPUser.EOF Then pusr = rsPUser("username") pcountry = rsPUser("country") pdob = rsPUser("dob") psquestion = rsPUser("sq") rsPUser.close set rsPUser = nothing IF pusr = usr AND pcountry = country AND pdob = dob Then Session("passchng") = "OK" Response.Redirect("forgot2.asp?pusr="&pusr&"&psquestion="&psquestion&"") ELSE error("wrong") END IF ELSE error("wrong") END IF END IF %> <%ELSEIF msg = "changed" Then%>