Since the string 'user' doesn't exist in the above sql statement I assume that this has to do with the data you are passing into your sql statement.

the most common problem could be that the string you are trying to insert contains an ' which is causing a premature termination of the string.

Do a response.write of the sql statemetn so that you can look at what its literal value is.

================================================== =========
Read this if you want to know how to get a correct reply for your question:
http://www.catb.org/~esr/faqs/smart-questions.html
^^Took that from planoie's profile^^
^^Modified text taken from gbianchi profile^^
================================================== =========
Technical Editor for: Professional Search Engine Optimization with ASP.NET
http://www.wiley.com/WileyCDA/WileyT...470131470.html
================================================== =========
Why can't Programmers, program??
http://www.codinghorror.com/blog/archives/000781.html
================================================== =========