卡奇尔和迪巧哪个好:帮忙看一下访问数据库的怎么写？

我这里有一个登陆验证的窗体，用VB编写的，总是出错
谁能帮忙看一下

代码如下：

Private Sub Command1_Click()

'定义变量，分别记录text1和text2的内容
Dim su As String
su = Text1.Text
Dim sp As String
sp = Text2.Text

'定义变量，查询sql字符串
Dim connstr As String
connstr = "select * from user where username='"&su&"' and password='"&sp&"'" '这里一加上双引号就报错，然后只好把双引号去掉

'操作connection对象
Dim conn As New ADODB.Connection

conn.ConnectionString = "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=access.mdb;Persist Security Info=False"

conn.Open

'操作command对象
Dim cmd As New ADODB.Command

cmd.CommandText = connstr

cmd.ActiveConnection = conn

'操作recordset对象
Dim rs As New ADODB.Recordset

'rs.Open connstr, conn, adOpenDynamic, adLockOptimistic, adCmdText

'验证登陆
(这一点的代码总是写不对)
End Sub
我把登陆验证照如下方式写了，帮忙看一下有什么不对的

If Text1.Text = "" Then
MsgBox "用户名为空，请重试"
text2.text=""
text1.setfocus
Exit Sub
Else
If Not Trim(Text1.Text) = rs.Fields(1).Name Then
rs.MoveNext
Exit Sub
Else
If Not Trim(Text2.Text) = rs.Fields(2).Name Then
MsgBox "用户名和密码不匹配，请重试"
Text1.SetFocus
Text2.Text = ""
Text2.Text = ""
Else
Unload Me
Form2.Show
End If
End If
End If