ERROR MESSAGE

[User 3672257]

I get an error > Line 1: Incorrect syntax near 'Username' When i run the code below hdstr = "SELECT Password FROM LogIn WHERE Username='" & UsernameTextBox.Text & "'" hdcmd = New SqlCommand(hdstr, hdcon) hdcmd.Parameters.Add(New SqlParameter("Username", UsernameTextBox.Text)) Dim usr As String = hdcmd.ExecuteScalar() Please help. JESA

[Paddy Boyd]

hdstr = "SELECT Password FROM LogIn WHERE Username= @UserName"

hdcmd = New SqlCommand(hdstr, hdcon)
hdcmd.Parameters.Add(New SqlParameter("@Username", UsernameTextBox.Text))

Dim usr As String = hdcmd.ExecuteScalar()

[User 3672257]

Thank You. It worked. JESA