I think the root problem is that you use character data types for storing dates. I would advice not to do that, instead use
datetime
.
Another thing is that you concatenate the values for the SQL statement as literals in the statement. In order to prevent problems with data type conversions etc. use
SqlParameter[
^] instead