修改用户密码页面, 但提交后提示UPDATE 语句的语法错误。
请问高手怎么解决.

以下是实现代码:

<%
    if request.Form("button") ="提交" then
        ppp=conn.execute("select count(*) from [user] where loginID='"&session("loginID")&"' and password='"&request.Form("oldpwd")&"'")(0)
        if ppp>0 then
            sql="update user set password='"&request.Form("pwd")&"' where loginID='"&session("loginID")&"'"
            conn.execute(sql)
            %>
            <script>
                alert("密码修改成功");
                location.href("modifypwd.asp");
            </script>
            <%
            response.End()
        else
            %>
            <script>
                alert("原始密码错误");
                location.href("modifypwd.asp");
            </script>
            <%
            response.End()
        
        end if
    end if
%>

ppp=conn.execute("select count(*) from [user] where loginID='"&session("loginID")&"' and password='"&request.Form("oldpwd")&"'")(0)
        if ppp>0 then
            sql="update [user] set password='"&request.Form("pwd")&"' where loginID='"&session("loginID")&"'"
上面那个SQL语句user都加了[]括号，为什么下面update不加中括号？