<%
set conn=Server.CreateObject("ADODB.connection")
cnstr = "Provider=SQLOLEDB.1;Data Source=(local);User ID=ic;Password=19xx;Initial Catalog=ic;Persist Security Info=True"

on error resume next
conn.open cnstr
 if err then
     err.clear     
    set conn = nothing
    response.write "数据库连接出错！"
        Response.End
end if


请问下这段代码是否有错，有安全隐患没？谢谢各位大侠了   给个安全的写法