title: An exception of type 'System.Data.SqlClient.SqlException' occurred in System.Data.dll
body: <blockquote>
    <p>An exception of type 'System.Data.SqlClient.SqlException' occurred in
    System.Data.dll but was not handled in user code</p>
    
    <p>Additional information: Incorrect syntax near the keyword 'WHERE'.</p>
  </blockquote>
  
  <p>I dont know where is the wrong in the syntax !!</p>
  
  <pre><code>using( var command1 = new SqlCommand("INSERT INTO Employee(EmpPhone,Password,OfficeNo,Floor, Building) VALUES (@EmpPhone,@Password,@OfficeNo,@Floor, @Building) WHERE EmpID ='" + id.Text + "'", con))
  {
        command1.Parameters.AddWithValue("@EmpPhone", Convert.ToInt32(phone.Text));
        command1.Parameters.AddWithValue("@Password", password.Text);
        command1.Parameters.AddWithValue("@OfficeNo", officeNo.Text);
        command1.Parameters.AddWithValue("@Floor", Convert.ToInt32(floor.Text));
        command1.Parameters.AddWithValue("@Building", Convert.ToInt32(building.Text));
  
       command1.ExecuteNonQuery();
  }
  </code></pre>