Relooking at my example, my syntax was incorrect and I hope you caught this mistake. I didnt use a comma between each of the columns & values and instead used the key word "And". Thats what I get for attempting to code in this webpage textbox... lol
strSQL = "Update [Employee] Set First_Name = @FName, Last_Name = @LName Where Employee_ID = @Id"
Parameters are pretty easy, I dont know why they dont push it more then the concatenated strings. Below is a quick example and here is a link for some more detailed info Configuring Parameters and Parameter Data Types (ADO.NET)
strSQL = "Update [Employee] Set First_Name = @FName And Last_Name = @LName Where Employee_ID = @Id" command.Transaction = myTransaction command.CommandType = CommandType.Text command.CommandText = strSQL Command.Parameters.AddWithValue("@FName", txtFName.Text) Command.Parameters.AddWithValue("@LName", txtLName.Text) Command.Parameters.AddWithValue("@Id", cint(txtStaffId.Text)) command.ExecuteNonQuery()