Update Query Error

[Pratik Somani]

When i am running this query its gvng an syntax error near where statement..

SqlCommand cmd2 = new SqlCommand("Update Personal_Profile set city='" + txtcity.Text + "',"+"hometown='" + txttown.Text + "',"+"iam='" + gender + "',"+"interestedin='" + interested + "',"+"languages='" + txtlang.Text + "',"+"aboutme='" + txtabtme.Text + "',"+"phno='" + txtmobileph.Text + "relationship='" + relationship +"','"+"where (username = '"+unm +"')", con);
cmd2.ExecuteNonQuery();
 

[Stewart Ross]

You have an error in the separators between parts just after the phone number.

You have this at present:

+"phno='" + txtmobileph.Text + "relationship='" + relationship +"','"+"where (username = '"+unm +"')"

but it should be

+"phno='" + txtmobileph.Text + "', relationship='" + relationship +"' WHERE (username = '"+unm +"')"

-Stewart

[Pratik Somani]

Thnks... D error has been removed .. But d values are still not being updated...

   protected void Button1_Click(object sender, EventArgs e)
    {
        con = new SqlConnection(cns);
        string unm = Session["uname"].ToString();
        string gender;
        gender = DropDownList1.SelectedValue.ToString();
        string interested;
        if (chkmale.Checked == true)
            interested = "male";
        else
            interested = "female";
        string relationship;
        relationship = DropDownList2.SelectedValue.ToString();
        con.Open();
        SqlCommand cmd1 = new SqlCommand("Select * from Personal_Profile where username ='" + unm + "'", con);
        SqlDataReader dr = cmd1.ExecuteReader();
        if (dr.Read())
        {
            if (dr.HasRows == false)
            {
                cmd = new SqlCommand("insert into Personal_Profile values('" + unm + "','" + txtcity.Text + "','" + txttown.Text + "','" + gender + "','" + interested + "','" + txtlang.Text + "','" + txtabtme.Text + "','" + txtmobileph.Text + "','" + relationship + "')", con);
                cmd.ExecuteNonQuery();
            }
            else
            {
                con.Close();
                con.Open();
                SqlCommand cmd2 = new SqlCommand("Update Personal_Profile set city='" + txtcity.Text + "',"+"hometown='" + txttown.Text + "',"+"iam='" + gender + "',"+"interestedin='" + interested + "',"+"languages='" + txtlang.Text + "',"+"aboutme='" + txtabtme.Text + "',"+"phno='" + txtmobileph.Text + "',relationship='" + relationship +"'where username = '"+unm +"'", con);
                cmd2.ExecuteNonQuery();
                con.Close();
            }
        }
    }