Area Login con Sha256

<%@LANGUAGE="VBSCRIPT" CODEPAGE="1252"%>
<!--#include file="SHA256.asp"-->
<%
Dim nome_ut
Dim pass
Dim art

nome_ut = Replace(Request.Form("nome_utente"), "'", "''")
pass = Replace(Request.Form("password"), "'", "''")
art = Replace(Request.Form("id_articolo"), "'", "''")

Dim cn
Set cn = Server.CreateObject("ADODB.Connection")
cn.Open "driver={Microsoft Access Driver (*.mdb)};dbq="&Server.MapPath("/mdb-database/platinum.mdb")
Dim sql
sql = "SELECT MEMBER_ID FROM FORUM_MEMBERS WHERE M_NAME='" &nome_ut&_
       "' AND M_PASSWORD='" & SHA256(Request.Form("password")) & "'"
Dim rs
Set rs = cn.Execute(sql)

Dim autenticato
if rs.eof then
  autenticato = false
else
  autenticato = true
end if
rs.Close
cn.Close
Set rs = Nothing
Set cn = Nothing

if autenticato = true then
  Session("nome_ut") = nome_ut
  Session("Autenticato") = "OK"
  Response.Redirect("http://www.tuosito.asp?id="& art )
else
  Response.Redirect("errore.asp")
end if
%>