#2 URL encoding omitted in confirmPassword function

[S Vickers]

The confirmPassword() JavaScript function in changepassword.asp fails to encode the user ID and password parameters and will, therefore, fail if, for example, either (or both) contains an ampersand character.