DB query

When i use the line

aQuery = "Select StudentID From Students Where (StudentID = '"& strUsername &"')"

what exactly happens if it finds the ID in the table?? How would i access the password assoc with this ID when im doin the following login authentication.

Sub Submit_OnClick(sender as Object, e as EventArgs)
  If StudentLogin (txtUserName.Text, txtPassword.Text) Then   
      FormsAuthentication.RedirectFromLoginPage (txtUserName.Text, False)
  Else
      ' Invalid credentials supplied, display message
      lblMessage.Text = "Invalid login credentials"
  End If
End Sub

Function StudentLogin (ByVal strUsername As String, _
                          ByVal strPassword As String) As Boolean
    ' Open DB
 Dim aConnection As OleDbConnection = New OleDbConnection
         Dim aConnectionString As String
         Dim aQuery As String
         aConnectionString = "Provider=Microsoft.Jet.OLEDB.4.0; Data Source=C:\DB\records.mdb"
         aConnection.ConnectionString = aConnectionString
         Dim aCommand As OleDbCommand = New OleDbCommand
         aConnection.Open()
   
 aQuery = "Select StudentID From Students Where (StudentID = '"& strUsername &"')"
 aCommand.Connection = aConnection
         aCommand = New OleDbCommand(aQuery, aConnection)
 aCommand.ExecuteNonQuery()

    ' Return True if UserID found else False
 
End Function                          

I'm confused as to where the ID is stored from the select statement if found in the table.

morningZ,

Yea thats true, Im looking for a numeric ID in the table, I've changed this to suit but Im unsure of how to write the validation against the DB to check whether its valid or not.  I'm attempting to do this in the following segment, could you give me your opinion on it?

Public Function Login(intID As Integer, strPassword As String)

    Dim aConnection As New OleDbConnection, aCommand As New      OleDbCommand, DbReader As OleDbDataReader, LoginSucces As Boolean
  Dim aConnectionString As String
  

    'The connection string
  
  aConnectionString = "Provider=Microsoft.Jet.OLEDB.4.0; Data Source=C:\DB\records.mdb"
    aConnection.ConnectionString = aConnectionString
    'Open the connection
    aConnection.Open()

 'Initialize the database command
 

     aCommand.CommandText = "SELECT Pword FROM Students WHERE StudentID = " & intID & ""

 Try

    DbReader = aCommand.ExecuteReader()
    While DbReader.Read

       LoginSucces = True

    End While
    DbReader.Close

 Catch

   LoginSucces = False

 End Try

 aConnection.Close()

 End Function

Can i say something like,

If (strPassword = aCommand.CommandText)

LoginSucess=True

?????

Ive tried it but I dont think i should be using aCommand.CommandText.  I just dont know how to use the Pword once i select if from the DB, i dont know where it gets stored