请大神看看这段代码有神马问题?

一片空白,不知道代码有啥问题?
<!--#include file="common/conn.asp"-->
<!--#include file="md5.asp"-->
<%
sql = "select * from admin where username='"&trim(request("UserName"))&"'"
set rs=server.createobject("adodb.recordset")
rs.open sql,conn,3
if not rs.eof then
if md5(trim(request("PassWord")))=trim(rs("password")) then
session("adminuser")=rs("username")
'response.Write(session("adminuser"))
'response.End()
%>
<script language="javascript">
window.navigate("main.asp");
</script>
<%
else
%>
<script language="javascript">
alert("用户名或密码错误！");
window.navigate("index.asp");
</script>
<%
end if
else
%>
<script language="javascript">
alert("用户名或密码错误！");
window.navigate("index.asp");
</script>
<%
end if
rs.close
set rs=nothing
%>