There is a check for blank username and password and so see if it is executed correctly and if not it should display the message
Code:
if UserName <> "" or Password <> "" then
.
.
.
else
'Invalid User
Response.Redirect "login.asp?UserName=blank"
end if