Update query of sql server in asp.net

query = "update dbo_personaldata set name='" + txtName.Text + "',[date]=#" + lblDate.Text + "#,gender='" + gender + "',father_name='" + txtFather.Text + "',date_of_birth=#" + datDate.Text + "#,nationality='" + txtNationality.Text + "',address='" + txtMailAddress.Text + "',city='" + txtCity.Text + "',state='" + txtState.Text + "',postal_code='" + txtPostal.Text + "',mobile_no='" + txtMobile.Text + "',category='" + txtCategory.Text + "',email='" + txtEmail.Text + "',state_of_domicile='" + txtDomicile.Text + "'where id=" + id;