Set Conn = Server.CreateObject("ADODB.Connection")
Conn.Open (Application("mysqldb"))
Set objCmd = Server.CreateObject("ADODB.Command")
objCmd.ActiveConnection = Conn
objCmd.CommandType = 1
objCmd.CommandText = "select * from members where username=? and password=?"
objCmd.Parameters.Append objCmd.CreateParameter("username", 200, 1, 20, u)
objCmd.Parameters.Append objCmd.CreateParameter("password", 200, 1, 20, p)
Set RS = objCmd.Execute
if RS.EOF Then
response.write("Error user not found. Please report this.")
Set objCmd.ActiveConnection = Nothing
Set objCmd = Nothing
Conn.Close
Set Conn=Nothing
response.end
Else
balance=formatCurrency(RS("credit"))
End if
Set objCmd.ActiveConnection = Nothing
Set objCmd = Nothing
Conn.Close
Set Conn=Nothing