I'm developing an ecommerce website and I want to use the Log In User behavior to set a session variable for the user. However, the behavior doesn't allow for the use of the password() function of MySQL. As such, I can only log people in and out with plain-text passwords, which I'd prefer to avoid.

I know if I use variable passing to log in a user, I can do it easily by adding the password() to the SQL query, but with the server behavior I can't. I'm using ASP VBScript to develop the site. I've tried editing the ASP script to add the password() function but I keep getting MySQL errors. Here's what the server behavior generates for the SQL query:

MM_rsUser.Source = "SELECT adminUsername, adminPass"
If MM_fldUserAuthorization <> "" Then MM_rsUser.Source = MM_rsUser.Source & "," & MM_fldUserAuthorization
MM_rsUser.Source = MM_rsUser.Source & " FROM trg.tbladmins WHERE adminUsername='" & Replace(MM_valUsername,"'","''" &"' AND adminPass='" & Replace(Request.Form("formPass","'","''" & "'"

Any ideas where I could add the password() function to this?

Thanks!