asp错误

这是一个关于登陆的处理出错如下：

----------------------------------------------
Script error detected at line 18.
Source line: rs.open sql,conn,1,1
Description: from 子句语法错误。
----------------------------------------------------
<!--#include file="conn1.asp"-->
<%
uname=trim(request.form("uname"))
upsw=trim(request.form("upsw"))
set rs=server.createobject("ADODB.RECORDSET")
sql="select * from user where username='"&uname&"' and userpsw='"&upsw&"'"
rs.open sql,conn,1,1
if not rs.eof and bof then
response.cookies("admin")=uname
response.redirect "index.asp"
else
response.write " <script language='javascript'>alert('用户名或密码错误!');location.href='javascript:history.back()'; </script>"
resposne.end
end if
rs.close
set rs=nothing
conn.close
set conn=nothing


'if rs.eof and rs.bof then
'rs.close
'set rs=noting
'conn.close
'set conn=nothing
'response.write" <script language='javascript'>alert('用户名错误!');location.href='javascript:history.back()'; </script>"
'response.end
'else