After end of result set

搜索页面.输入一个确定存在的值,结果出现After end fo result set.找了半天也没找到哪里会有一个已经关闭的结果集.包含文件是一个全静态文件,没有动态内容.
代码:
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<%@ page contentType="text/html; charset=GBK" pageEncoding="GBK" %>
<%@ page language="java" %>
<%@ page import="javax.naming.*" %>
<%@ page import="javax.sql.DataSource" %>
<%@ page import="java.sql.*" %>
<html>
<head>
<meta http-equiv="Content-type" content="text/html; charset=GBK" >
<title>搜索商品</title>
</head>
<body>
<%@ include file="includetop.jsp" %>
<%
String pname="";
String sql="";if(request.getParameter("pname")!=null)
{
  pname=request.getParameter("pname");
  pname=new String(pname.getBytes("ISO-8859-1"));
  sql="SELECT * FROM product WHERE pname REGEXP '"+pname+"'";
  }
 if(pname.equals(""))
 {
  sql="SELECT * FROM product WHERE pname REGEXP'_*'";
  }
  if(request.getParameter("stock")!=null)
  {
   String ss=request.getParameter("stock");
   sql="SELECT * FROM product WHERE stock<="+ss;
   }
   out.print(sql+"<br>");
   try{
        Context initCtx = new InitialContext();
        Context ctx =(Context)initCtx.lookup("java:comp/env");
        DataSource ds =(DataSource)ctx.lookup("jdbc/myweb");
        Connection conn = ds.getConnection();
        Statement stmt = conn.createStatement();
        ResultSet rs = stmt.executeQuery(sql);
        
        out.print("搜索结果如下:<BR>");
        out.print("<TABLE border=1 bordercolorlight=#000000>");
        out.print("<TR><TD width=40>序号</TD>");
        out.print("<TD WIDTH=60>代码</TD>");
        out.print("<TD WIDTH=80>商品名称</TD>");
        out.print("<TD WIDTH=60>品牌</TD>");
        out.print("<TD WIDTH=150>产品简介</TD>");
        out.print("<TD WIDTH=80>存货数量</TD>");
        out.print("<TD WIDTH=80>价格</TD>");
        out.print("<TD width=60>更改</TD>");
        out.print("<TD width=60>删除</TD></TR>");
        
        while(rs.next());
        {
          out.print("<TR>");
          out.print("<TD>"+rs.getInt(1)+"</TD>");
          out.print("<TD>"+rs.getString("pdm")+"</TD>");
          out.print("<TD>"+rs.getString("pname")+"</TD>");
          out.print("<TD>"+rs.getString("provider")+"</TD>");
          out.print("<TD>"+rs.getString("info")+"</TD>");
          out.print("<TD>"+rs.getString("stock")+"</TD>");
          out.print("<TD>"+rs.getString("price")+"</TD>");
          out.print("<FORM action=update1.jsp method=post>");
          out.print("<INPUT type='hidden' name='id' value='"+rs.getInt(1)+"'>");
          out.print("<TD><INPUT type='submit' value='更改' name='submit'></TD>");
          out.print("</FORM>");
          out.print("<FORM action=delpro.jsp method=post>");
          out.print("<INPUT type='hidden' name='id' value='"+rs.getInt(1)+"'>");
          out.print("<TD><INPUT type='submit' value='删除' name='submit'></TD>");
          out.print("</FORM>");
          out.print("</TR>");
         }
        out.print("</TABLE>");
        rs.close();
        stmt.close();
        conn.close();
     }catch(SQLException e){
     out.print(e.toString());
     }
%>
</body>
</html>