ASP Help required!

[font=Arial][size=2]I have this code that is checking user id and password:[/size][/font]
[font=Arial][size=2][/size][/font]
[font=Arial][size=2]<% dim conn
set conn = Server.CreateObject(“ADODB.connection”)
conn.open “icopdb”
userid = request(“xuid”)
password = request(“xpwd”)
[color=#008000] SQLcommand = “select * from abstract where uid = " _
& userid
set rs = conn.execute(SQLcommand)
[/color] if not rs.eof then
if password = rs.fields(“pwd”) then
response.redirect “abs.asp”
else
response.redirect “login.asp”
end if
end if
%> [/size][/font]
[font=Arial][size=2][/size][/font]
[font=Arial][size=2]It shows me an error [color=#ff0000]”[Microsoft][ODBC Microsoft Access Driver] Too few parameters. Expected 1[/color]" and the error seems to be on the green line in the code.[/size][/font]
[font=Arial][/font]
[font=Arial]Any idea anyone?[/font]
[font=Arial][/font]
[font=Arial]Thanks[/font]
[font=Arial]Aditya[/font]