I'm encrypting passwords using the Crypto API and checking them upon login with a SQL string like this:

lcUserPass = THIS.EncryptPasswd(PADR(lcUserPass,20))
Server.oSqlConn.cSql = [SELECT CPAUsers.* FROM CPAUsers ] + ;
	[INNER JOIN CPAOrgs ON CPAUsers.OrgCode = CPAOrgs.OrgCode ] + ;
	[WHERE (LOWER(CPAUsers.UserEmail) = '] + lcUserID + [') ] + ;
	[AND (CPAUsers.OrgCode = '] + lcOrgCode + [') AND ] + ;
	[(CPAUsers.UserPass = ']+lcUserPass+[') AND (CPAUsers.Active = 1) AND (CPAOrgs.Active = 1)]

It appears that sometimes the Crypto API generates an encrypted string that causes a SQL error.

What can I do either in syntax or in database structure to avoid this problem?

TIA