Incorrect Syntax near the keyword where Dim cmd = New SqlCommand((Convert.ToString((Convert.ToString("update USR set PASS = '") & newPwd) + "' ,LASTPWDMDDT = '" + "GETDATE()" + "', where USRID = '") & userid) + "'")