Firstly please do not use string concatenation in SQL statements, it exposes your database to SQL injection, as described at
http://bobby-tables.com/about.html[
^]. Use proper parameterised queries.
Secondly, a few seconds with your debugger would have shown you what value
cmbBuilding.Text
is returning.