ciao a tutti mi sono incasinato con le chiusure delle connessioni e se le abilito non mi funziona niente....vi posto il codice:

ho due connessioni a due db conn e adoCon
mi date una controllata...grazie....
codice:
If Request.QueryString("step") = "2" THEN 
	authorized = False
	username = Trim(Request.Form("username"))
	password = Trim(Request.Form("password"))

	If Len(username) = 0 Or Len(password) = 0 Then
		Response.Write "Please insert usename and password"
	Else
		username = Replace(username,"'","''")
		password = Replace(password,"'","''")

		sql = "SELECT username, password FROM user " &_
		"WHERE username = '" & username & "' " &_
		"AND password = '" & password & "'"

		Set Rs = Conn.Execute(sql)

		If Rs.EOF Then
			Response.Write "Incorrect Login!"
		Else
			'Utente moderatore , mentre Utente admin ha una vsession aggiuntiva
			Session.TimeOut = 15 
			authorized = True
			Session("authorized") = authorized 

			set tbuser=Conn.execute("select * from user WHERE username = '" & username & "'")
			struserautority = tbuser("autority")
			strname 		= tbuser("name")
			struser 		= tbuser("username")
			strtime 		= Time()
			strdate 		= Date()
			strip			= Request.ServerVariables("REMOTE_ADDR")
			strhost			= Request.ServerVariables("REMOTE_HOST")

			Set rs1 = Server.CreateObject("ADODB.Recordset") 
			sql1 = "INSERT INTO log ([autority], [name], [username], [timein], [datein], [ip], [host]) VALUES('"&struserautority&"', '"&strname&"', '"&struser&"', '"&strtime&"', '"&strdate&"', '"&strip&"', '"&strhost&"')" 
			conn.execute sql1 
			'rs1.Close
		    'set rs1=Nothing
			conn.Close
		    set conn=Nothing
			
			If struserautority = "admin" or struserautority = "mod" then
				If struserautority = "admin"  then
					Session.TimeOut = 15 
					loginadmin = True
					Session ("loginadmin") = loginadmin
				End If
				Set rs_login = Server.CreateObject ("ADODB.RecordSet")
				strSQL = "SELECT * FROM tbl_authors WHERE authority='" & struserautority & "' "
				rs_login.open strSQL,adoCon
				Response.Cookies("Login")("userCode") = rs_login("code")
				struserautority = rs_login("authority")
				strname 		= rs_login("fullname")
				struser 		= rs_login("name")
				stremail		= rs_login("email")
				strtime 		= Time()
				strdate 		= Date()
				strip			= Request.ServerVariables("REMOTE_ADDR")
				strhost			= Request.ServerVariables("REMOTE_HOST")
				rs_login.Close
		    	set rs_login=Nothing
				
				Set rs3 = Server.CreateObject("ADODB.Recordset") 
         		sql3 = "INSERT INTO log ([autority], [fullname], [username], [email], [timein], [datein], [ip], [host]) VALUES('"&struserautority&"', '"&strname&"', '"&struser&"', '"&stremail&"', '"&strtime&"', '"&strdate&"', '"&strip&"', '"&strhost&"')" 
				adoCon.execute sql3 
				'rs3.Close
		    	'set rs3=Nothing
			End If
			
		End If
		
	End If
	'Rs.Close
		'Set Rs = Nothing
		'Conn.Close
		'Set Conn = nothing
	If authorized Then
		Response.Redirect "restricted_area.asp"
	End If
End If