sql = "update [user] set [password]='"&request.Form("pwd")&"' where loginID="&session("loginID") response.write sql