如下代码中，asp在关键字 'user' 附近有语法错误，求指点？

Question

<%set conn=server.CreateObject("adodb.connection")str="provider=SQLOLEDB;Server=(LOCAL);Uid=sa;pwd=515891;Database=gcmpt;"conn.open str%><%Dim rsDim dbpuser=request.Form("user")pass=request.Form("pass")set rs=Server.CreateObject("adodb.recordset")dbp=Server.Mappath("LOCAL")str="select *from user where admin='"&user&"'and pass='"&pass&"'"rs.open str,conn,1,1if rs.eof thenresponse.write ("<script language=""javascript"">alert(""没有该用户"");location.href(""index.asp"")</script>")response.endelseresponse.write ("<script language=""javascript"">alert(""登录成功"");location.href(""bangong.asp"")</script>")response.endend if%>高手请帮忙。

Answer 1

str="select *from user where admin='"&user&"' and pass='"&pass&"'"
and前要有空格啊，不然拼装起来就是 userand pass了，当然不行。

Answer 2

str="select *from [user] where admin='"&user&"'and pass='"&pass&"'"
以后建表的时候尽量不要用程序默认的字符。