There is a check for blank username and password and so see if it is executed correctly and if not it should display the message
Code:
if UserName <> "" or Password <> "" then
.
.
.
else
    'Invalid User
    Response.Redirect "login.asp?UserName=blank"
end if