Tried that and even tried re-typing the lines out with a few line breaks...
If Request.Form("Key")>"" Then strSql = "SELECT M_NAME, M_PASSWORD, M_NEWKEY" & _ " FROM " & strMemberTablePrefix & "MEMBERS_PENDING" & _ " WHERE lCase(M_NAME)='" & trim(lCase(Request.Form("UserName"))) AND "' & M_PASSWORD='" & SHA256(Request.Form("Password")) & "' AND M_NEWKEY='" & trim(Request.Form("Key")) & "'" Set rsValid = my_Conn.Execute(strSql) If not rsValid.EOF Then rsValid.Close Set rsValid = Nothing