這樣的判斷行不行，asp－用戶登錄時的判斷

dim name,pwd
name=request.form("user")
pwd=request.form("pwd")
set conn=server.CreateObject("adodb.connection")
conn.open"driver={microsoft access driver (*.mdb)};dbq="&server.MapPath("data\bb.mdb")
rs=conn.execute("select * from user where name="&name&" and pwd="&pwd&"")
if rs.eof then
response.write"對不起沒有此用戶。或是您的密碼輸入有誤===<a href=default.asp>返回</a>==="
else
ke=""&rs("oskey")&""
session("nana")=name
session("keke")=ke
response.Redirect("default.asp")
end if