asp中通过access数据库进行用户登录验证

<%
Submit = request.form("Submit")

if Submit <> "" then
	set conn = server.createobject("adodb.connection")
	conn.open "provider=microsoft.jet.oledb.4.0;data source="&server.mappath("../data/zhou.mdb")

	username = request.form("username")
	password = request.form("password")
	exec = "select count(*) as num from manager where username = '" + username + "' and password='" + password + "'"
			
	set rs = server.createobject("adodb.recordset")
	rs.open exec,conn,1,1
	num = cint(rs("num"))
	rs.close
	set rs = nothing
	conn.close
	set conn = nothing
	
	if num = 1 then
		'有效管理员
		session("isadmin") = "yes"
		response.Redirect("mainlist.asp")
	else
		'无效管理员
		response.Redirect("login_error.asp")
	end if
end if
%>