c# - An exception of type 'System.Data.SqlClient.SqlException' occurred in System.Data.dll

Question

An exception of type 'System.Data.SqlClient.SqlException' occurred in System.Data.dll but was not handled in user code

Additional information: Incorrect syntax near the keyword 'WHERE'.

I dont know where is the wrong in the syntax !!

using( var command1 = new SqlCommand("INSERT INTO Employee(EmpPhone,Password,OfficeNo,Floor, Building) VALUES (@EmpPhone,@Password,@OfficeNo,@Floor, @Building) WHERE EmpID ='" + id.Text + "'", con))
{
      command1.Parameters.AddWithValue("@EmpPhone", Convert.ToInt32(phone.Text));
      command1.Parameters.AddWithValue("@Password", password.Text);
      command1.Parameters.AddWithValue("@OfficeNo", officeNo.Text);
      command1.Parameters.AddWithValue("@Floor", Convert.ToInt32(floor.Text));
      command1.Parameters.AddWithValue("@Building", Convert.ToInt32(building.Text));

     command1.ExecuteNonQuery();
}

Answer 1

Problem is still unidentified. What actually you want to achieve, a new row or update an existing row.

In case of insert:

using( var command1 = new SqlCommand("INSERT INTO Employee(EmpPhone,Password,OfficeNo,Floor, Building) VALUES (@EmpPhone,@Password,@OfficeNo,@Floor, @Building)", con))
                {
                command1.Parameters.AddWithValue("@EmpPhone", Convert.ToInt32(phone.Text));
                command1.Parameters.AddWithValue("@Password", password.Text);
                command1.Parameters.AddWithValue("@OfficeNo", officeNo.Text);
                command1.Parameters.AddWithValue("@Floor", Convert.ToInt32(floor.Text));
                command1.Parameters.AddWithValue("@Building", Convert.ToInt32(building.Text));


  int i=         command1.ExecuteNonQuery();
}

Update:

using( var command1 = new SqlCommand("Update Employee Set EmpPhone=@EmpPhone,Password=@Password,OfficeNo=@OfficeNo,Floor=@Floor, Building = @Building Where EmployeeId =@Id", con))
 {
   command1.Parameters.AddWithValue("@EmpPhone", Convert.ToInt32(phone.Text));
   command1.Parameters.AddWithValue("@Password", password.Text);
   command1.Parameters.AddWithValue("@OfficeNo", officeNo.Text);
   command1.Parameters.AddWithValue("@Floor", Convert.ToInt32(floor.Text));
   command1.Parameters.AddWithValue("@Building", Convert.ToInt32(building.Text));
 command1.Parameters.AddWithValue("@Id", Convert.ToInt32(Id.Text));


  int i= command1.ExecuteNonQuery();
}