% Dim strEmail strEmail = Session("CustEmail") Dim strPWD strPWD = Session("CustPWD") Dim strCartId strCartId = Request("CartId") DIM mySQL, objRS mySQL = "SELECT * FROM Customers Where Email='"& strEmail &"' And PWD='" & strPWD & "'" Set objRS = Server.CreateObject("ADODB.Recordset") objRS.Open mySQL, objConn %>