<HTML>
<BODY>

<% ' Allow a user to change their password.
' This page must be protected by Basic Authentication

UserName = Request.ServerVariables("LOGON_USER")
If UserName = "" Then
   Response.Write "<h2>You must disable anonymous access for this sample to function.</h2>"
   Response.End
End If

If Request("ChangePassword") <> "" Then
   If Request("Pass1") <> Request("Pass2") Then
      Response.Write("The new password was not correctly confirmed.<HR>")
   Else
      Set AU = Server.CreateObject("Persits.AspUser")
      AU.ChangePassword "", UserName, Request("OldPass"), Request("Pass1")
      Response.Write("Password has been changed.<HR>")
   End If
End If
%>

<H1>User: <% = UserName %></h1>

<TABLE>
<FORM Action="test1.asp" METHOD=POST>
<TD>Old Password:</TD> <TD><INPUT SIZE=40 TYPE=PASSWORD NAME="OldPass"><TD><TR>
<TD>New Password:</TD> <TD><INPUT SIZE=40 TYPE=PASSWORD NAME="Pass1"><TD><TR>
<TD>Confirm Password:</TD> <TD><INPUT SIZE=40 TYPE=PASSWORD NAME="Pass2"><TD><TR>
<INPUT TYPE=HIDDEN NAME=ChangePassword VALUE=1>
<INPUT TYPE=SUBMIT VALUE="Change">
</FORM>
</TABLE>

</BODY>
</HTML>