Thanks for your quick response
Can I do it with record set
This is what I have:
strsql = "select all * from [usersdatabase]" _
& " where userid = '" & Session("userid"

& "' AND lastname = '" & session("lastname"

& "' AND firstname = '" & session("firstname"

& "'"
set rs = Server.CreateObject("ADODB.Recordset"

rs.Open strsql, conn, 1, 2
if (rs.BOF and rs.EOF) then
Response.Write("<font size='3' color='red'><b>Userid '" & userid & "' not found, try again.....</b></font><p>"

elseif Request.form("password"

<> rs("PASSWORD"

then
Response.Write("<font size='3' color='red'><b>Incorrect Current password, Please try again....</b></font><p>"

else
'Update record with new password.
rs("USERID"

= Session("userid"

rs("PASSWORD"

= Request.Form("newpass1"

rs.Update
rs.Close
Set rs = Nothing
conn.Close
Set conn = Nothing
Response.Write("<font size='3' color='red'><b>Your password has been successfully changed.....Thank You</b></font><p>"

end if
end if
end if