asp-ajax

<%
response.expires=-1
Set OBJdbConnection = Server.CreateObject("ADODB.Connection")
OBJdbConnection.ConnectionTimeout = Session("ConnectionTimeout")
OBJdbConnection.CommandTimeout = Session("CommandTimeout")
OBJdbConnection.Open Session("ConnectionString")
Set SQLStmt = Server.CreateObject("ADODB.Command")
Set RS = Server.CreateObject ("ADODB.Recordset")
q=ucase(request.querystring("q"))  'asp-Parameter
if q<>"" then
SQLStmt.CommandText = "select * from users where userid='" & q &"'"
SQLStmt.CommandType = 1
Set SQLStmt.ActiveConnection = OBJdbConnection
RS.Open SQLStmt
if not RS.EOF then
realPermmssion=RS("permission")
userTablePassword=RS("password")
response.write(RS("permission")&"`"&RS("password"))
end if
end if
%>