sql="Update Employee Set First_Name = @FirstName, Last_Name = @LastName, Phone = @Phone, [E-mail] = @Email, Address = @Address, Availability = @Availability Where Employee_ID = @EmployeeID"

Protected Sub Button1_Click(ByVal sender As Object, ByVal e As System.EventArgs) Handles Button1.Click
        Dim con As New SqlConnection
        Dim cmd As New SqlCommand
        con.ConnectionString = "Data Source=XXXXXX;Initial Catalog=XXXXX;Persist Security Info=True;User ID=XXXX;Password=XXXX"
        con.Open()
        cmd.Connection = con
        cmd.CommandText = "Update services set service_name = @sName, cost = @sCost, service_desc = @sDesc, cat_rel = @sCatRel Where service_ID = @sID"
        'Response.Write(cmd.CommandText)
        cmd.Parameters.Add(New SqlParameter("@sName", SqlDbType.VarChar, 50))
        cmd.Parameters("@sName").Value = txtSername.Text
        cmd.Parameters.Add(New SqlParameter("@sCost", SqlDbType.VarChar, 50))
        cmd.Parameters("@sCost").Value = txtCost.Text
        cmd.Parameters.Add(New SqlParameter("@sDesc", SqlDbType.Text))
        cmd.Parameters("@sDesc").Value = ServDescr.Value
        cmd.Parameters.Add(New SqlParameter("@sCatRel", SqlDbType.Int))
        cmd.Parameters("@sCatRel").Value = CatRel.SelectedValue
        cmd.Parameters.Add(New SqlParameter("@sID", SqlDbType.Int))
        cmd.Parameters("@sID").Value = Request.QueryString("id")
        cmd.ExecuteNonQuery()
        Updated.Text = "Your service data was updated successfully!"
 
    End Sub

Imports System.Data
Imports System.Data.SqlClient
 
Partial Class admin_service_edit
    Inherits System.Web.UI.Page
    'write database data to form on initial load
    Protected Sub Page_Load(ByVal sender As Object, ByVal e As System.EventArgs) Handles Me.Load
        Dim con As String = "Data Source=xxx;Initial Catalog=xxx;Persist Security Info=True;User ID=xxx;Password=xxx"
        Dim cmd As New SqlCommand
        Dim pId As Integer
        pId = Request.QueryString("id")
        cmd.CommandText = "Select * from services where service_ID = '" & pId & "'"
        cmd.Connection = New SqlConnection(con)
        cmd.Connection.Open()
        Dim dr As SqlDataReader = cmd.ExecuteReader()
        While dr.Read()
            txtSername.Text = dr("service_name")
            txtCost.Text = dr("cost")
            ServDescr.Value = dr("service_desc")
            CatRel.SelectedValue = dr("cat_rel")
        End While
        cmd.Connection.Close()
    End Sub
    'on button click update the database record
    Protected Sub Button1_Click(ByVal sender As Object, ByVal e As System.EventArgs) Handles Button1.Click
        Dim mycon As New SqlConnection
        Dim mycommand As New SqlCommand
        mycon.ConnectionString = "Data Source=xxx;Initial Catalog=xxx;Persist Security Info=True;User ID=xxx;Passwordxxx"
        mycon.Open()
        mycommand.Connection = mycon
        Try
            mycommand.CommandText = "Update services set service_name = @sName, cost = @sCost, service_desc = @sDesc, cat_rel = @sCatRel Where service_ID = @sID"
            'Response.Write(mycommand.CommandText)
            mycommand.Parameters.AddWithValue("@sName", txtSername.Text)
            mycommand.Parameters.AddWithValue("@sCost", txtCost.Text)
            mycommand.Parameters.AddWithValue("@sDesc", ServDescr.Value)
            mycommand.Parameters.AddWithValue("@sCatRel", CatRel.SelectedValue)
            mycommand.Parameters.AddWithValue("@sID", Request.QueryString("id"))
            'mycommand.Parameters.Add(New SqlParameter("@sName", SqlDbType.VarChar, 50))
            'mycommand.Parameters("@sName").Value = txtSername.Text
            'mycommand.Parameters.Add(New SqlParameter("@sCost", SqlDbType.VarChar, 50))
            'mycommand.Parameters("@sCost").Value = txtCost.Text
            'mycommand.Parameters.Add(New SqlParameter("@sDesc", SqlDbType.Text))
            'mycommand.Parameters("@sDesc").Value = ServDescr.Value
            'mycommand.Parameters.Add(New SqlParameter("@sCatRel", SqlDbType.Int))
            'mycommand.Parameters("@sCatRel").Value = CatRel.SelectedValue
            'mycommand.Parameters.Add(New SqlParameter("@sID", SqlDbType.Int))
            'mycommand.Parameters("@sID").Value = Request.QueryString("id")
            mycommand.ExecuteNonQuery()
            Updated.Text = "Your service data was updated successfully!"
        Catch ex As Exception
            Updated.Text = ex.Message
            MsgBox(ex.Message)
        End Try
        mycommand.Connection.Close()
    End Sub
End Class