<!-- #include virtual="/includes/functions.asp" -->
<%
usertype = fixsql(request.form("usertype"))
validate usertype, ""

firstname = fixsql(request.form("firstname"))
validate firstname, ""

lastname = fixsql(request.form("lastname"))
validate lastname, ""

distributorID = fixsql(request.form("distributorID"))
validate distributorID, "int"

company = fixsql(request.form("company"))
validate company, ""

address = fixsql(request.form("address"))
validate address, ""

city = fixsql(request.form("city"))
validate city, ""

state = fixsql(request.form("state"))
validate state, ""

zip = fixsql(request.form("zip"))
validate zip, ""

phone = fixsql(request.form("phone"))
validate phone, ""

email = fixsql(request.form("email"))
validate email, ""

password = fixsql(request.form("password1"))
validate password, ""

set objDB = OpenDatabase(false)

SQL = "Update Users set FirstName = '" & firstname & "', LastName = '" & lastname & "', Address = '" & address & "', City = '" & city & "', State = '" & state & "', Zip = '" & zip & "', Email = '" & email & "', Phone = '" & phone & "' where ID = '" & session("userID") & "'"
UpdateDB objDB, SQL

if password <> "" then
	SQL = "Update Users set Password = '" & password & "' where ID = '" & session("userID") & "'"
	UpdateDB objDB, SQL
end if

objDB.close
set objDB = nothing

response.redirect("../account.asp?sucess=true")
%>