Can someone let me know what is wrong with my SQL Statement and how I can improve it?

```
da = new SqlDataAdapter("SELECT * FROM Guests"+" WHERE Students.name='" + 
   byNametextBox.Text + "'", MyConn);

```