请各位帮我看看代码哪里有问题，关于修改密码

<%



  pwd1=trim(request("pwd1"))

  pwd2=trim(request("pwd2"))

 set rs=Server.CreateObject("ADODB.Recordset")

  sql="select * from user_info where name='"&session("username")&"' "

  rs.open sql,conn,1,3

 

  if rs("password")<>pwd1 then 

        response.write "<script language='javascript'>"

     response.write  "alert('Wrong current password!');window.location.href='changepw.asp';"

     response.write "</script>"

     response.end

   else

       rs("password")=pwd2

      rs.update

      response.write "<script language='javascript'>"

      response.write  "alert('Change password success,please remember the new password!');window.location.href='home.asp';"

      response.write " </script>" 

      

   

   rs.close

   set rs=nothing

  end if

%>