Problems With Sqlreader

Hi everyone,

I am writing a simple login application in asp 2.0.  I have spent quite a little bit of time of this error so any help would be greatly appreciated. 

Here is the code i am using. 

Dim cn As SqlConnection

Dim cmd As SqlCommand

Dim sql As String = "select password from attendant where " & _

" ((username = @username) and (password = @password)"

cn = New SqlConnection("Data Source=z-davissqlexpress;Initial Catalog=Trainingdb;Integrated Security=True")

' cn = New SqlConnection(System.Configuration.ConfigurationManager.ConnectionStrings("TrainingdbConnectionString").ToString)

'I have tried both connection strings and get the same error. 

cmd = New SqlCommand(sql, cn)

cmd.Parameters.Add("@username", SqlDbType.VarChar, 50)

cmd.Parameters("@username").Value = txtuser.Text

cmd.Parameters.Add("@password", SqlDbType.VarChar, 50)

cmd.Parameters("@password").Value = txtpass.Text

cn.Open()

Dim myreader As SqlDataReader

myreader = cmd.ExecuteReader(CommandBehavior.CloseConnection)

'The line above is where i get the error.

If myreader.Read() Then

FormsAuthentication.RedirectFromLoginPage(txtuser.Text, False)

Else

Response.Write("Try again")

After stepping through the code the error stops on this line:

myreader = cmd.executereader(commandbehavior.closeconnection)

The error that is generated is:  Incorrect syntax near ')'

Any help would be greatly appreciated or any other code snippets

Thanks,

notrosh