ASP+access进行客户身份验证

if trim(request.Form("num"))<>"" and trim(request.Form("kh_pwd"))<>"" then
     dim a,kh_num,kh_pwd,sql,rs
     kh_num=trim(request.Form("num"))
     kh_pwd=trim(request.Form("kh_pwd"))
     set rs=Server.CreateObject("ADODB.Recordset")
     sql="select count(*) from infor where kh_num='&kh_num&' and kh_pwd='&kh_pwd&'"
     'set rs=conn.execute(sql)
     rs.open sql,conn,1,3
     a=rs.recordcount
     if a>0 then
     '另外一种方法：
     'if not(rs.bof and rs.eof) then比如
     '   select password from user where username="名字"
     '   之后string pass=填写密码的文本框的值
     '   if password=pass
     '  提示成功
     '   反之失败
     Response.Write(" <script> alert( '登录成功！ ') </script> ")
     response.Redirect"index.asp"
     else
     Response.Write( " <script> alert( '用户名或密码错误！ ') </script> ")
     end if