private void button1_Click(object sender, EventArgs e) { conn.Open(); //SQL Command OleDbCommand cmd = conn.CreateCommand(); cmd.CommandType = CommandType.Text; //cmd.CommandText = "insert into OhFlowers(FirstName,LastName,UserName,Email,PromotionalMaterial,BusinessType)values('" + textBox1.Text + "', '" + textBox4.Text + "', '" + textBox3.Text + "','" + textBox2.Text + "', '" + txtPromo.Text + "', '" + txtBusType.Text + "')"; cmd.CommandText = "insert into OhFlowers(FirstName,LastName,UserName,Email,PromotionalMaterial,BusinessType)values(@FirstName,@LastName,@UserName,@Email,@PromotionalMaterial,@BusinessType)"; cmd.Parameters.AddWithValue("@FirstName", textBox1.Text); cmd.Parameters.AddWithValue("@LastName", textBox2.Text); cmd.Parameters.AddWithValue("@UserName", textBox3.Text); cmd.Parameters.AddWithValue("@Email", textBox4.Text); cmd.Parameters.AddWithValue("@PromotionalMaterial", txtPromo.Text); cmd.Parameters.AddWithValue("@BusinessType)", txtBusType.Text); cmd.ExecuteNonQuery(); conn.Close(); this.Close(); } }