写入数据时出现错误！请教下！

大家好，我在做Blog发表日志时出现了一些错误，我用的是：WebEditor编辑器！写入文章可以正确写入，可是添加一个flash时会出错的！

Microsoft JET Database Engine 错误 '80040e14' 语法错误 (操作符丢失) 在查询表达式 ''<OBJECT codeBase=http://download.,0,0,0 height=800 width=800 classid=clsid:D27CDB6E-AE6D-11cf-96B8-444553540000><PARAM NAME="_cx" VALUE="21167"><PARAM NAME="_cy" VALUE="21167"><PARAM NAME="Flas' 中。 /admin_wangyuanqi/blog/add_save.asp，行 41
可是写入文章是可以的！请问应该如何改写代码了？
<[email=%@LANGUAGE=]%@LANGUAGE="VBSCRIPT[/email]" CODEPAGE="936"%>
<% option explicit %>
<!-- #include file="../../conn.asp"-->
<%
if replace(replace(session("admin"),"'",""),"or","")="" then
response.write "<script language='javascript'>alert ('乐乐提示：\n\n★你没有登录或登录已超时，请重新登录！')</script>"
response.write "<script language='javascript'>window.location='../admin_login.asp'</script>"
response.end
end if
%>
<%
dim ip,author,title,content,from
ip=request.servervariables("remote_addr")       '获取当前客户端IP地址
author=request.form("author")                   '文章作者
title=replace(trim(request.form("title")),"'","‘")           '文章标题
from=request.form("come")      '文章来自哪里
content=request.form("demo")                    '文章内容
if author="" then
response.write "<script language='javascript'>alert ('乐乐提示：\n\n★发布人没有填写请返回哟！')</script>"
response.write "<script language='javascript'>history.go(-1)</script>"
response.end
elseif title="" then
response.write "<script language='javascript'>alert ('乐乐提示：\n\n★日志标题没有填写请返回哟！')</script>"
response.write "<script language='javascript'>history.go(-1)</script>"
response.end
elseif content="" then
response.write "<script language='javascript'>alert ('乐乐提示：\n\n★日志内容没有填写请返回哟！')</script>"
response.write "<script language='javascript'>history.go(-1)</script>"
response.end
elseif from="" then
response.write "<script language='javascript'>alert ('乐乐提示：\n\n★文章来源没有填写请返回哟！')</script>"
response.write "<script language='javascript'>history.go(-1)</script>"
response.end
end if
%>
<%
dim sql
sql="insert into blog(b_title,b_ip,b_author,b_content,b_from) values('"&title&"','"&ip&"','"&author&"','"&content&"','"&from&"')"
lele.execute(sql)
response.write "成功了"
%>