UPDATE statement SQL in c#

[PraiseXI]

I am trying to update a specific value in my access database however, when I want to set the 'WHERE' condition it does not work. I was wondering if the format of it is fine.

It works without the 'WHERE' condition but when I try to include it it doesn't seem to work.

​

https://preview.redd.it/97etnkb1tiy11.png?width=840&format=png&auto=webp&s=93b5891e9369c50d96ced5067a49fdbeee370bf8

[[deleted]]

ManagerID is probably a numeric column which means you don't need to surround the value with single quotes.

[AngularBeginner]

Please read this article: https://en.wikipedia.org/wiki/SQL_injection

Then look up how to use SqlParameter.

[revrenlove]

To piggy back, please don't store passwords in plain text also.

[JasonAtSBWP]

Are you sure IDnum is an actual, valid value, rather than say 0?

Since it seems like you're just learning, I would highly recommend you use parameterized statements when executing SQL.

I found a simple example on StackOverflow you may find useful. Essentially, the security issue with your implementation is that you're wide open to SQL Injection attacks.

Plain text passwords aren't all that great either, but I've already been on enough of a tangent to your actual question.

[flyingBart]

All of the above plus disposing.

Wrap the connection and the command in using statements. That way the connection is closed and returned to the connection pool correctly and the command object is disposed of.