<%@LANGUAGE="VBSCRIPT" CODEPAGE="1254"%> <% 'Declare variables Dim sSQL, addnewadmin Dim username, password username = Replace(Request.Form("admin_user"),"'","''") password = Replace(Request.Form("admin_pass"),"'","''") 'build the SQL statement like '%%"& u_input & "%%' sSQL = "insert Into Settings (admin_user, admin_pass) values ('"&username&"','"&password&"' );" 'Create an instance of an ADO connection object Set addnewadmin=Server.CreateObject("ADODB.Connection") 'Open the connection addnewadmin.Open(Conn) 'Execute the SQL addnewadmin.execute(sSQL) 'Close the resources and free up resources addnewadmin.Close Set addnewadmin=Nothing response.write"New Admin User Added" %>