cmd.CommandText = string.Format("UPDATE [products] SET [cat_id] = @cat_id, [OldName] = @OldName ,[Name] = @Name,[Desc] = @Desc,[Resistance] = @Resistance,[Weight] = @Weight, [Indoor] = @Indoor,[Season] = @Season,[pic_small] = '{0}',[pic_big] = @pic_big,[zOrder] = @zOrder WHERE [Name]='{1}'", fileName, productName