Hey im trying to design a log in type page with an access database and im trying to put a variable into the SQL statement and its not letting me do it

dim mySQL
mySQL = "SELECT * FROM USERS WHERE USERNAME='" & Request.Form("username") & "'"
set recordCollection=connectionToDatabase.Execute(mySQL)
connectiontodatabase.


any help???