vi posto il mio codice...mi da il seguente errore sulla select...come mai?

No value given for one or more required parameters.

codice:
dim conn,rs 
Dim strSQL 
set conn=Server.CreateObject("ADODB.Connection") 
conn.provider="Microsoft.Jet.OLEDB.4.0" 
conn.open(server.mappath("mdb-database/photo.mdb")) 
Session ("User") = Request.form("User")
strSQL="SELECT * FROM [User] WHERE [User]='"& Request.form("User") &"' AND [Password]='"& Request.form("Password") &"'"
set rs=Server.CreateObject("ADODB.Recordset") 
rs.Open strSQL, conn, 3, 3 
if not rs.eof then phtologgato=true
rs.Close
set rs=nothing