Syntax error in UPDATE statement

hai there guys. I'm sorry if this questions is common. I already did my search and still couldn't find what's the problem. To me the syntax is quite ok already. Here is the code snippet for my UPDATE query.

//rd.Close();
label36.Visible = false;
dbCom.CommandType = CommandType.Text;
dbCom.CommandText = "UPDATE loginDB SET password='" + confirmpass_tb.Text + "' WHERE ID= '" + textBox1.Text + "'";
dbCom.Connection = dbCon;
 //dbCon.Open();
dbCom.ExecuteNonQuery();
/*string access = string.Format("UPDATE loginDB set password='" + confirmpass_tb.Text + "' WHERE ID='" + textBox1.Text + "'");
dbCom = new OleDbCommand(access, dbCon);
 dbCom.ExecuteNonQuery();*/
MessageBox.Show("Successfully Updated");

any help would be greatly appreciated. :)

Tags: C# (C# 4.0)