$login_res = "SELECT *
          FROM ITF_USER
          WHERE ITF_LOGIN = '" . $lcUserName . "'
          AND ITF_PASS = HashBytes('SHA1', '" . $lcPassword . "')";
$login_res = mssql_query( $login_res ) or die("failed to query ITF_USER: \n" . mssql_get_last_message() );