User Name Error On Insert To Database

I have the code below that will insert the record to the database. The code works fine, until I try to add the current user thats logged on and then I try to submit the values to the database and it gives me this error
Incorrect syntax near the keyword 'user'.
and highlights this line.
MyCmd.ExecuteNonQuery()
 Thanks

 





Protected Sub Submit_Click(ByVal sender As Object, ByVal e As System.EventArgs) Handles Submit.Click
Dim name, address, nice As String
Dim sConnString, sSQL As String
Dim u As MembershipUser
'Receiving values from Form, assign the values entered to variables
name = Request.Form("name")
address = Request.Form("address")
u = Membership.GetUser(User.Identity.Name)
nice = u.ToString()

'comments = Request.Form("comments")

'declare SQL statement that will query the database
sSQL = "INSERT into test (name, address, user) values ('" & _
name & "', '" & address & "', '" & _
nice & "')"
'define the connection string, specify database
'driver and the location of database
sConnString = ConfigurationManager.ConnectionStrings("aspnetdbConnectionString1").ConnectionString.ToString()

'create an ADO connection object

Using MyConnection As New System.Data.SqlClient.SqlConnection(sConnString)
Dim MyCmd As New System.Data.SqlClient.SqlCommand(sSQL, MyConnection)
MyConnection.Open()
MyCmd.ExecuteNonQuery()
End Using

Response.Write("The form information was inserted successfully.")

End Sub
End Class