Error Comparing Textbox Variable To Database Value

hi im trying to code a login page using asp.net, vb.net. i have 2 web-controlled textboxes whose values i want to compare to userID and password stored on a SQL server database called users. When button clicked, call function checklogin.





heres the code:





Private Sub btn_login_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles btn_login.Click





If Page.IsValid Then





Dim usersDS As New System.Data.DataSet





usersDS = checklogin(userID.Text, password.Text)





If usersDS.Tables(0).Rows.Count = 1 Then


FormsAuthentication.RedirectFromLoginPage(userID.Text, False)


Else


error_log.Text = "Invalid Credentials: Please try again"


End If


End If





End Sub





Function checklogin(ByVal userID As Char, ByVal password As Char) As System.Data.DataSet





Dim connectionString As String


Dim dbConnection As New SqlConnection


Dim dbCommand As New SqlCommand


Dim dataAdapter As New SqlDataAdapter


Dim ds As New DataSet





connectionString = "server=localhost;user id=sa; password=chaos; Integrated Security=SSPI; database=users"


'server=localhost; database=users; integrated Security=SSPI;Â?@user id=sa; password=chaos





dbConnection.ConnectionString = connectionString





With dbCommand


.Connection = dbConnection


.CommandText = "SELECT COUNT (*)Â?@AS pass FROM tbl_users WHERE ((tbl_users.userId = @userId) AND (tbl_users.password = @password))"


End With





dataAdapter.SelectCommand = dbCommand





dataAdapter.Fill(ds)





Return ds





End Function





Heres the error i get:





Details of exception: System.Data.SqlClient.SqlException: There is a syntax invalid near


line {''1





Source error:





Line 75:. CommandText = "declare@userID As varChar; declare @password As varChar; End With .."Line 76:.. line 77:of SELECT COUNT(*) AS pass FROM tbl_users WHERE((tbl_users.userId=@userId)AND(tbl_users.password=@password))


Line 78: DataAdapter.SelectCommand=dbCommand


Line 79: DataAdapter.Fill(ds)





ive just started using .net, im a lil lost...thanks for any help. cheers