% UserName=Session("UserName") set rs = Server.CreateObject("ADODB.recordset") sql="select * from User where UserName='"&UserName&"'" rs.open sql,conn,1,1 %>