Help needed asp

this is like a password thing i will be realting to my flash form but for now its html forms

userform = Request.QueryString(“user”)
EnteredPassword = Request.QueryString(“password”)

password = conn.Execute(“SELECT password FROM passwords WHERE username = '”&userform&"’")
//just finidng the password in my table where the username they entered is

If EnteredPassword=password Then
//trying to validate the password matched form table with one from form
ive got my connection and everything but how do i make my sql statement a variable which i can use in my if statement what i ahve setup there doesn’t seem to work please help thaanks in advance