Set rs = Server.CreateObject("<database>")
recID=""
recPWD=""
If (ID<>"") And (PWD<>"") Then

    SQL="SELECT * from Users Where ID='" & ID & "'"
    rs.Open SQL,conn,1,1

    If Not rs.EOF Then
        recID=rs("ID")
        recPWD=rs("PWD")
    Else
        recID=""
        recPWD=""
    End If

    If ID=recID Then
        If PWD=recPWD Then
            If rs("Enable")=True  Then
                'login
            Else
                'account no enabled
            End If
        else
            'wrong password
        End If
    Else
        'no such account
    End If
Else
    'please input id and pwd
End If

rs.close