rs is null

Microsoft OLE DB Provider for ODBC Drivers error '80040e14'

[Microsoft][ODBC SQL Server Driver][SQL Server]Incorrect syntax near the keyword 'and'.

D:\INETPUB\VHOSTS\CLEANROOMSUPPLIESLTD.COM\HTTPDOCS\SHOP\../includes/functions.asp, line 1489