I'm getting a syntax error on the line below when trying to do an insert into a SQL database:

set rsInsert = conn.Execute ("INSERT INTO user (lastname, firstname, grade) values ('" & lastname & "', '" & firstname & "', '" & grade & "' ")

The exact error:

[Microsoft][ODBC SQL Server Driver][SQL Server]Incorrect syntax near the keyword 'user'.

Any help is appreciated!

Thanks