value is not showing under recordset.eof using parameterized query in vbscript

[axiomlokesh]

I am creating one login validation page for my classic asp site(vbscript). as i want prevent my page from sql injection, i used parametrized queries in my page but i am unable to retrieve value after writing if "not recordset.eof" line. value is not passing. please help me to solve this issue. my code is below given.

<%
Dim Objrs, objConn, objCmd, str
 
Set objConn = Server.CreateObject("ADODB.Connection")
Set objCmd  = Server.CreateObject("ADODB.Command")
Set Objrs   = Server.CreateObject("ADODB.Recordset")
 
objConn.open MM_connDUdirectory_STRING '(already created)
 
Set objCmd.ActiveConnection = objConn
 
str = "SELECT * FROM admin WHERE Ausr=? AND Apwd=?"
 
objCmd.CommandText = str
objCmd.CommandType = adCmdText
 
dim objParam1, objParam2
Set objParam1 = objCmd.CreateParameter("param1", adVarChar, adParamInput, len(StrUserName), "")
objCmd.Parameters.Append objParam1
objCmd.Parameters("param1") = StrUserName
 
Set objParam2 = objCmd.CreateParameter("param2", adVarChar, adParamInput, len(StrPassword), "")
objCmd.Parameters.Append objParam2
objCmd.Parameters("param2") = StrPassword
set objRS = objCmd.execute
 
 
if objRS.EOF <> True and objRS.BOF <> True then
if Objrs("Ausr") = objCmd.Parameters("param1") then
response.Write(Objrs("Ausr"))
'response.Write should show username but its showing blank
end if
end if
%>