Microsoft Access Database Engine 错误 '80040e14' INSERT INTO 语句的语法错误。 /AddItem.asp，行 34

<%
dim cartID,ID,name,price,quantity
cartID=session("cartID")
if cartID=""then cartID=0
ID=request("ID1")
name=request("name1")
price=ccur(request("price1"))
quantity=1
set conn=server.CreateObject("adodb.connection")
conn.open MM_conn_STRING
set rscart=server.createobject("adodb.recordset")
sql="select*from carts where cartID=" &cartID
rscart.open sql,conn,3,2
if rscart.eof then
rscart.addnew
rscart("cartdate")=date
rscart.update
rscart.movelast
cartID=rscart("cartID")
session("cartID")=cartID
end if
rscart.close
sql="insert into cartitems(cartID,productID,name,price,quantity)values("&cartID&","&ID&","&name&","&price&","&quantity&")"
conn.execute sql
set conn=nothing
response.redirect"Cart.asp"
%>

name是字符串吧
sql="insert into cartitems(cartID,productID,name,price,quantity)values("&cartID&","&ID&",'"&name&"',"&price&","&quantity&")"
前后加上单引号