% dim rs set rs = server.CreateObject("ADODB.Recordset") user = session("USERNAME") sqlstr ="SELECT * FROM tblUser where UserName ='" & user &"'" 'response.Write sqlstr 'response.End() rs.Open sqlstr,db %>