INSERT query syntax error in ASP.NET C# with Access -

INSERT query syntax error in ASP.NET C# with Access -

i trying insert info access database c#. error receive

insert statement syntax error

the code is

textbox5.text = ins; //string value string = "insert customersales(c-invoiceno,c-invoicedate, c-discount, c-rant,c-paid, c-due) values ('" +textbox5.text.tostring() + "'," + datetimepicker1.text + "," + diccombo.text.trim() + "," + granttxt.text + "," + txtpaid.text + ","+ txtdue.text + ")"; con.open(); cmd = new oledbcommand(into, con); cmd.executenonquery(); con.close();

table name : customersales

columnname :

id (autonumber) c-invoiceno (text) c-invoicedate (date/time) c-discount (currency) c-grant (currency) c-paid (currency) c-due (currency)

you should using parameterized query, this

class="lang-csharp prettyprint-override">string = "insert [customersales] ([c-invoiceno], [c-invoicedate], [c-discount], [c-grant], [c-paid], [c-due]) " + "values (?,?,?,?,?,?)"; con.open(); cmd = new oledbcommand(into, con); cmd.parameters.addwithvalue("?", textbox5.text); cmd.parameters.addwithvalue("?", datetimepicker1.value.date); cmd.parameters.addwithvalue("?", diccombo.text); cmd.parameters.addwithvalue("?", granttxt.text); cmd.parameters.addwithvalue("?", txtpaid.text); cmd.parameters.addwithvalue("?", txtdue.text); cmd.executenonquery(); con.close();

asp.net ms-access