ResultSet rs=pstmt.executeQuery();%>编译过了但是执行时出错是为啥

这个是代码：
<%@ page language="java" contentType="text/html; charset=utf-8"
    pageEncoding="utf-8"%><%@page import="java.util.*,java.sql.*"%>
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<title>Insert title here</title>
<%
        String user=request.getParameter("name");         
   String pass=request.getParameter("password");
      
     %>
</head>
<body><%
Class.forName("com.mysql.jdbc.Driver");
Connection conn=DriverManager.getConnection("jdbc:mysql://127.0.0.1:3306/shuju","root","1111");
String sql="select*from shujuku while name='"+user+"'";
PreparedStatement pstmt=conn.prepareStatement(sql);
ResultSet rs=pstmt.executeQuery();%>
<h2>查询表</h2><hr/>
<table border="0" width="700">
<tr>
<tr bgcolor="#dddddd">
<td align="center"> name</td>
<td align="center"> password</td></tr>
<% String name,password;
while (rs.next()){
name=rs.getString(1);
password=rs.getString(2);
%>
<tr>
<td><%=name %></td>
<td><%=password %></td>
<%
}
%>
</tr>
</table>
</body>
</html>
报错：