Comments by Mohannad Khaled Maglad (Top 1 by date)

sqlcommand cmd=new sqlcommand(commanttext,connection);
commmand.excutescalar();

try add this values in a parameters it's better
command.Paramert.AddWithValue("@value",txt//yourvalue);
command.connection=yourconnection;