Code pour faire une application permettant de changer son mot de passe

<%
dim passold, passnew1, passnew2, login

login = request.form("login_form")
passold = request.form("passold_form")
passnew1 = request.form("passnew1_form")
passnew2 = request.form("passnew2_form")

queryStr2 = "SELECT * FROM T_personne WHERE (Login_personne = '"&login&"') AND (Pass_personne = '"&passold&"')"
set PassRec = Cndb.Execute(queryStr2)

if PassRec.EOF then response.redirect("change_pass2.asp")

if passnew1 <> passnew2 then response.redirect("change_pass3.asp")

queryStr3 = "UPDATE T_personne SET Pass_personne = ('"&passnew1&"') WHERE Login_personne = ('"&login&"')"
set PassRec3 = Cndb.Execute(queryStr3)

%>