我用了这个代码有错误了

<!--#include file="inc/config.asp"-->
<!--#include file="mdb.asp"-->

<%
dim hid
hid=cint(request.querystring("hd_id"))
if founderr then
  call diserror()
else
sql="select * from hd_song where hdsong_id="&hid
set rs=conn.execute(sql)
dim name
name=rs("hdsong_name")
artis=rs("hdsong_nahxiqi")
update=rs("hdsong_update")
open=rs("hdsong_open")
down=rs("hdsong_down")
rasim=rs("hdsong_img")
%>

<%if open="hd" then%>
<%
Dim url,strUrl,strPath
Dim strInceptFile
strInceptFile = "swf,fla,jpg,jpeg,gif,png,bmp,tif,iff,mp3,wma,rm,wmv,mid,rmi,cda,avi,mpg,mpeg,ra,ram,wov,asf"
url =Replace(Replace(Replace(Request(""&down&""), "'", ""), "%", ""), "\", "/")
If Len(url) > 3 Then
       If Left(url,1) = "/" Then
              Response.Redirect url
       End If
       If InStr(url, "../") > 0 Then
              Response.Redirect url
       End If
       strUrl = Left(url,10)
       If InStr(strUrl, "://") > 0 Then
              Response.Redirect  url
       End If
       If InStr(url, "/") > 0 Then
              url =Replace(url, "../", "")
              If CheckFileExt(url) Then
                     strPath = Server.MapPath(".") & "\" & url
                     strPath = Replace(strPath, "/", "\")
                     Call downThisFile(strPath)
              End If
       Else
              Response.Redirect url
       End If
End If

Sub downThisFile(thePath)
       Response.Clear
       On Error Resume Next
       Dim stream, fileName, fileContentType
      
       fileName = split(thePath,"\")(UBound(split(thePath,"\")))
       Set stream = Server.CreateObject("adodb.stream")
       stream.Open
       stream.Type = 1
       stream.LoadFromFile(thePath)
       Response.AddHeader "Content-Disposition", "attachment; filename=" & fileName
       Response.AddHeader "Content-Length", stream.Size
       Response.Charset = "UTF-8"
       Response.ContentType = "application/octet-stream"
       Response.BinaryWrite stream.Read
       Response.Flush
       stream.Close
       Set stream = Nothing
End Sub

Function CheckFileExt(ByVal strFile)
       Dim ArrInceptFile
       Dim i, strFileExt
      
       On Error Resume Next
      
       If Trim(strFile) = "" Or IsEmpty(strFile) Then
              CheckFileExt = False
              Exit Function
       End If
      
       strFileExt = GetFileExtName(strFile)
       strFileExt = LCase(strFileExt)
       strInceptFile = LCase(strInceptFile)
       If Len(strInceptFile) = 0 Then
              CheckFileExt = True
              Exit Function
       End If
       ArrInceptFile = Split(strInceptFile, ",")
      
       For i = 0 To UBound(ArrInceptFile)
              If Trim(strFileExt) = Trim(ArrInceptFile(i)) Then
                     CheckFileExt = True
                     Exit Function
              Else
                     CheckFileExt = False
              End If
       Next
       CheckFileExt = False
End Function
Function GetFileExtName(ByVal strFilePath)
       Dim strExtName
       strExtName = Mid(strFilePath, InStrRev(strFilePath, ".") + 1)
       If InStr(strExtName, "?") > 0 Then
              GetFileExtName = Left(strExtName, InStr(strExtName, "?") - 1)
       Else
              GetFileExtName = strExtName
       End If
End Function
%>
<%elseif open="hda" then%>
<%end if%><p></p> <%end if%>

我用了上面的代码

<!--#include file="inc/config.asp"--> 数据库地址
<!--#include file="mdb.asp"--> 打开数据库

打开访问是 a.asp?hd_id=1

怎么没运行

<%if open="hd" then%>

下的代码啊。。。 

url =Replace(Replace(Replace(Request(""&down&""), "'", ""), "%", ""), "\", "/")

这里的代码有误吗？

帮我。。

这一行这样：

url =Replace(Replace(Replace(Request("down"), "'", ""), "%", ""), "\", "/")  'down是地址或表单传递过来的参数时

或这样：
url =Replace(Replace(Replace(Request(down), "'", ""), "%", ""), "\", "/"）'down是变量时