懂asp的帮我看一下程序

第一句:

sql="select * from users where u_username="&Request.form("u_username")

改为:

sql="select * from users where u_username='"&Request.form("u_username")&"'"

<%
sql="select * from users where u_username="&Request.form("u_username")
rs.open sql,conn,1,1
if rs.recordcount<>0 then Response.Redirect("users_regform.asp?msg=用户已存在")
rs.close

sql="select top 1 * from users"
rs.open sql,conn,1,3
rs.addnew
rs("u_username")=Request.form("u_username")
rs("u_password")=Request.form("password")
rs.update
rs.close
Response.Redirect("index.asp?msg=请登陆")
%>

<%
sql="select * from [users] where u_username='"&Request.form("u_username")&"'"
rs.open sql,conn,1,1
if