Syntax Error In UPDATE Statement.

I have place a lblmessage.text = ex.Message to trace what happen and it show me a syntax error in update happen. I don't know whats wrong with my syntax. Can someone help me on this?





<%@ Page Language = "vb" Debug="true" %>


<%@ import namespace= "system.data" %>


<%@ import namespace= "system.data.oledb" %>


<script runat="server">





'set up connection


dim conn as new oledbconnection _


("provider = microsoft.jet.oledb.4.0;" & _


"data source = c:aspnetdataanking.mdb")














sub page_load(sender as object, e as eventargs)


if not page.ispostback then


filldatagrid()


end if


end sub














sub submit (sender as object, e as eventargs)


'insert new data


dim i,j as integer


dim params(7) as string


dim strtext as string


dim blngo as boolean = true





j = 0





for i = 0 to addpanel.controls.count -1


if addpanel.controls(i).gettype is _


gettype (textbox) then


strtext = ctype(addpanel.controls(i), _


textbox).text


if strtext <> "" then


params(j) = strtext


else


blngo = false


lblmessage.text = lblmessage.text & _


"you forgot to enter a value for " & _


addpanel.controls (i).id & "<p>"


lblmessage.style ("forecolor")= "red"


end if


j=j+1


end if


next





if not blngo then


exit sub


end if





dim strsql as string = "INSERT INTO tblusers " & _


"(firstname, lastname, address, city, state, " & _


"zip, phone) values (" & _


"'" & params(0) & "'," & _


"'" & params(1) & "'," & _


"'" & params(2) & "'," & _


"'" & params(3) & "'," & _


"'" & params(4) & "'," & _


"'" & params(5) & "'," & _


"'" & params(6) & "')"





executestatement(strsql)


filldatagrid()


end sub














sub dgdata_edit (sender as object, e as datagridcommandeventargs)


filldatagrid(e.item.itemindex)


end sub














sub dgdata_delete (sender as object, e as datagridcommandeventargs)


dim strsql as string = "DELETE FROM tblusers " & _


"WHERE userid = " & e.item.itemindex + 1





executestatement(strsql)


filldatagrid()


end sub














sub dgdata_update (sender as object, e as datagridcommandeventargs)


if updatedatastore(e) then


filldatagrid(-1)


end if


end sub











sub dgdata_cancel (sender as object, e as datagridcommandeventargs)


filldatagrid(-1)


end sub











sub dgdata_pageindexchanged (sender as object, e as datagridpagechangedeventargs)


dgdata.databind()


end sub











function updatedatastore (e as datagridcommandeventargs) as boolean


dim i,j as integer


dim params(7) as string


dim strtext as string


dim blngo as boolean = true





j = 0





for i =1 to e.item.cells.count - 3


strtext = ctype(e.item.cells(i).controls(0), _


textbox).text


if strtext <> "" then


params(j) = strtext


blngo = true


j= j+1


else


blngo = false


lblmessage.text = lblmessage.text & _


"you forgot to enter a value<p>"


end if


next





if not blngo then


return false


exit function


end if





dim strsql as string = "update tblusers SET " & _


"Firstname.value = '" & params(0) & "'," & _


"lastname.value = '" & params(1) & "'," & _


"address.value = '" & params(2) & "'," & _


"city.value = '" & params(3) & "'," & _


"state.value = '" & params(4) & "'," & _


"zip.value = '" & params(5) & "'," & _


"phone.value = '" & params(6) & "'," & _


" WHERE Userid = " & ctype(e.item.cells(0). _


controls(1), label).text





executestatement (strsql)


return blngo


end function





sub filldatagrid (optional editindex as integer = -1)


' open connection


dim objcmd as new oledbcommand _


("select * from tblusers", conn)


dim objreader as oledbdatareader





try


objcmd.connection.open ()


objreader = objcmd.executereader()


catch ex as exception


lblmessage.text = "error retrieving from the " & _


"database."


end try





dgdata.datasource = objreader


if not editindex.equals(nothing) then


dgdata.edititemindex = editindex


end if





dgdata.databind()


objreader.close


objcmd.connection.close()





end sub





function executestatement (strsql)


dim objcmd as new oledbcommand(strsql, conn)





try


objcmd.connection.open()


objcmd.executenonquery()


catch ex as exception


lblmessage.text = ex.message


end try





objcmd.connection.close()


end function


</script>





<html><body>


<asp:label id= "lblmessage" runat ="server" />


<form runat= "server">


<asp:datagrid id = "dgdata" runat ="server"


bordercolor = "black"


gridlines="vertical"


cellpadding ="4"


cellspacing="0"


width = "100%"


autogeneratecolumns = "False"


ondeletecommand = "dgdata_delete"


oneditcommand = "dgdata_edit"


oncancelcommand = "dgdata_cancel"


onupdatecommand = "dgdata_update"


onpageindexchanged= "dgdata_pageindexchanged"


font-names = "arial"


font-size="8pt"


showfooter = "true"


headerstyle-backcolor= "#cccc99"


footerstyle-backcolor= "#cccc99"


itemstyle-backcolor= "#ffffff"


alternatingitemstyle-backcolor="#cccccc">





<columns>


<asp:templatecolumn headertext="id">


<itemtemplate>


<asp:label id = "name" runat = "server"


text = '<%# container.dataitem("userid")%>' />


</itemtemplate>


</asp:templatecolumn>





<asp:boundcolumn headertext = "firstname"


datafield = "firstname" />





<asp:boundcolumn headertext = "lastname"


datafield = "lastname" />





<asp:boundcolumn headertext = "address"


datafield = "address" />





<asp:boundcolumn headertext = "city"


datafield = "city" />





<asp:boundcolumn headertext = "state"


datafield = "state" />





<asp:boundcolumn headertext ="zip"


datafield = "zip" />





<asp:boundcolumn headertext ="phone"


datafield = "phone" />





<asp:editcommandcolumn


edittext="Edit"


canceltext="cancel"


updatetext="update"


headertext = "edit"/>





<asp:buttoncolumn headertext = "delete?" text = "X"


commandname = "delete"


buttontype = "pushbutton" />





</columns>


</asp:datagrid><p>





<asp:panel id= "addpanel" runat = "server">


<table>


<tr>


<td width ="100" valign = "top">


first and last name:


</td>


<td width ="300" valign = "top">


<asp:textbox id= "tbfname" runat = "server"/>


<asp:textbox id= "tblname" runat = "server"/>


</td>


</tr>


<tr>


<td valign = "top">address:</td>


<td valign= "top">


<asp:textbox id= "tbaddress" runat = "server"/>


</td>


</tr>


<tr>


<td valign = "top">city, state, zip:</td>


<td valign= "top">


<asp:textbox id= "tbcity" runat = "server"/>


<asp:textbox id= "tbstate" runat = "server"/>


<asp:textbox id= "tbzip" runat = "server"


size=5 />


</td>


</tr>


<tr>


<td valign= "top">phone:</td>


<td valign= "top">


<asp:textbox id= "tbphone" runat = "server"


size = 11/><p>


</td>


</tr>


<tr>


<td colspan = "2" valign = "top" allign = "right">


<asp:button id = "btsubmit" runat ="server" text ="add"


onclick = "submit" />


</td>


</tr>


</table>


</asp:panel>


</form>


</body></html>