Not sure if this can help but I saw your code and found out that you have a semicolon on the 3rd line. I think you should remove it. Hope it helps.
strSQL = "SELECT destination FROM tblLoginInfo " _
& "WHERE username='" & Replace(txtUsername.Text, "'", "''") & "' " _
& "AND password='" & Replace(txtPassword.Text, "'", "''") & "';" _
& "AND position='" & Replace(items.Text, "'", "'") & "';"