请高手帮我看下这段代码那有问题啊？为什么输入正确还会提示不存在呢？
<!--#include file="conn.asp"-->
<!--#include file="md5.asp"-->
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312" />
<title>修改密码处理页</title>
</head>
<body>
<%
dim password,uname
uid=request.QueryString("id")
password=md5(trim(request.Form("newPwd")))
sql="select * from INDEX where id="&uid
set session=server.CreateObject("ADODB.Recordset")
session.open sql,conn,1,3
if session.eof then
response.Write("该用户不存在<br>")
response.Write("<a href=mmxg.asp>返回</a>")
else
sql1="update INDEX set [password]='"&pwd&"' where id="&uid
set rs=server.CreateObject("adodb.recordset")
rs.open sql1,conn,1,3
session.close
response.Write("<h2>密码修改成功</h2>")
response.Write("<input type=button name=close onclick=window.close() value=关闭>")
end if
%>
</body>
</html>