connection string

[CarpetMnuncher!]

whats wrong with this ?

Set Con = Server.CreateObject("ADODB.Connection")
Con.Open strCon
sql = "Select uName, pword from settings WHERE uname = 'kenney"&
session("site_username") & "' AND pword = 'homza"& session("site_password")
& "'"
set rec = Con.execute(sql)
if rec.eof then
response.redirect "login.asp"
end if


rec.close
set rec = nothing
Con.close
set Con = nothing