<%
………………
sqlstr="select * from userinfo where username='" & LoginName & "'"
rs.open sqlstr,conn
userlogin=false
if not rs.eof
if rs("password")=password then userlogin=true
end if
rs.close
if userlogin then
sqlstr="select * from taskinfo where username='" & loginname & "'"
rs.open sqlstr,conn
………………
%>