这个怎么登录不了呢？

[飞扬残月]

<!--#include file="default.asp" --><!--#include file="md5.asp" --><%
set conn=server.createobject("adodb.connection")
conn.open "provider=sqloledb.1;data source=myserver;"&_
"user id=sa;password=lili789;initial catalog=my2651"
'strCnn="driver={SQL Server};server=myserver;uid=sa;pwd=lili789;database=my2651;"
'set objCnn=server.CreateObject("ADODB.Connection")
'objCnn.OPen strCnn%>
<%
dim password,username,bumen,password1
username=Request("username")
bumen=Request("bumen")
password1=request("password")
password=md5(request.form("password"),32)
if username="" or password1="" then
Response.write"<script>alert('用户名和密码不能为空！',history.back())</script>"
end if
set rs=server.Createobject("adodb.recordset")
sql="select * from [user] where username='"&username&"'"
rs.Open sql,conn,1,1
if not rs.eof then
if password=rs("password") then
session("username")=username
session("bumen")=bumen
response.write"<br><br><br><center>欢迎你 <font color=blue> "&username&" </font>,你已经成功登录系统,可以正常使用 ！"
else
Response.write"<script>alert('密码或者部门不正确,请重新输入！',history.back())</script>"

end if
end if
%><%
rs.close
set rs=nothing
conn.close
set conn=nothing%>

总是提示 密码或者部门不正确,请重新输入
请问怎么解决啊

[liuyingzi]

确认password传过来的值和数据库里的一样
把password=md5(request.form("password"),32)
改为password=md5(trim(request.form("password")),32)

把
if password=rs("password") then
改为if password=trim(rs("password") then)
就是去掉空格试试