Untitled

Dim conn as SqlConnection = new SqlConnection("Data Source=localhost;Initial Catalog=database;User ID=uid;Password=pass")
conn.Open()

' assuming a textbox with id txtUserId exists on the aspx page
Dim userId as String = txtUserId.Text
Dim sql as String = "SELECT name, password FROM users WHERE id=@userid"

Dim cmd as SqlCommand = new SqlCommand()
cmd.Connection = conn
cmd.CommandType = CommandType.Text
cmd.CommendText = sql
cmd.Parameters.AddWithValue("userid", userId);

Dim dr as SqlDataReader = cmd.ExecuteReader()