Need help with Visual Basic ADO.NET?

Just do a select for the username, pword and id where the username and pword are the ones the user enters. If you get one, and only one, record returned, it's a match. No record means a bad username, a bad pword or there's just no record for that person. More than one record means that something's wrong, and you might be allowing the wrong person in. (Make sure you protect against SQL injection - you'll have to study the subject to see all the different things you have to do.)