If this is actually the line of code:

sql = Update web Set answer1='" & answer1 & "' where identity ='" & identity &

Then it isn't going to work as you do not have an opening double-quote on the string and you are ending the line with the concatenation character.

Beyond that you are leaving yourself open to SQL Injection by using the methods you are using. At the very least you should be using a command object with parameters instead of a straight SQL string.