Search in SQL by ASP.NET

SELECT id, idofbrand, name_product, camera, os, cameratype, ostype, price FROM tProduct WHERE (idofbrand IN (SELECT Id FROM dbo.StringToTable(@idbrand, ',') AS StringToTable_1)) OR (price BETWEEN @price1 AND @price2) OR (camera = @camera) OR (os = @os)

and the parameters can also be sent
example:Finder.aspx?os=true
But the command is not implemented