Sikkerhedshuller i login?

Hej eksperter

Jeg har lavet dette script til at logge ind på en side.

Kan I se nogle sikkerhedshuller i scriptet?

<%
If Request.Form("mode") = "Check" then
     
        ' Authes user, password, and fixed a known securitybug to many login systems.
        strUsername = Trim(Replace(request.Form("user"),"'","''" ))
        strPassword = Trim(Replace(request.Form("pass"),"'","''" ))
     
        set conn = Server.CreateObject("ADODB.Connection")
        'conn.Open "Driver={Microsoft Access Driver (*.mdb)}; DBQ=" & Server.MapPath("../../db/usersystem.mdb")
        conn.Open "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" & Server.MapPath("../../db/usersystem.mdb")
     
        Sql = "SELECT * from users where [user] = '" & strUsername  & "' and [pass] ='" & strPassword  & "'"
        Set rs = conn.Execute(Sql)
     
                if rs.EOF then
     
                        Session("login") = ""
                        error = "You´re not authed be the system"
     
                else
     
                        Session("login") = "Authed"
                        Response.Redirect "default.asp"
     
                End if
        rs.Close
        set rs = Nothing
        conn.Close
        set conn = Nothing
End if
%>