PLEASE Enter:)

hello members, hows everything goin ?

i am finishing my website and i got some problems and i need your help guys please.

first of all i've made these two methods the first one seems to work gr8 but in the other one that updates table values, i get '0' value in my field when i run the methods on my application and it doesn't update the required field at all. this is the code:

//this one checks if both username and password match together.

public bool NameAndPass(string user, string pass)

bool NameAndPassflag = false;

string queryStr = "SELECT * FROM admin where username='" + user + "' AND password='" + pass + "' ";

OleDbConnection connectObj = new OleDbConnection(this.connectionStr);

OleDbCommand commandObj = new OleDbCommand(queryStr, connectObj);

OleDbDataReader readerObj;

if (readerObj.Read())

NameAndPassflag = true;

return NameAndPassflag;

public void ModifyPass(string user, string pass)

string queryStr = "UPDATE admin SET username ='" + user + "' AND password='" + pass + "' WHERE username='"+user+"' ";

OleDbConnection connectObj = new OleDbConnection(this.connectionStr);

OleDbCommand cmd = new OleDbCommand(queryStr, connectObj);