conn.execute("update [user] set [password]='"&request.Form("pwd")&"' where loginID='"&session("loginID")&"'")