ASP.NET: Records in database don't get updated
<p>I'm trying to update my database records, but no changes are made and no error messages. I checked the syntax, the values I'm sending, everything is just fine .. 
any suggestions?  </p>

<p>This is my code which executed when [save] button is clicked:</p>

<pre><code>ds.UpdateCommand = "UPDATE Users 
                    SET Fullname='" + fname.Text + "',
                        Permission='" + per.SelectedValue + "', 
                        Email='" + email.Text + "', 
                        phone='" + phone.Text + "' 
                    WHERE UserID=" + Session["userID"].ToString();
ds.Update();
</code></pre>

<p>I'm reading values from form filled by the user 
<code>ds</code> is an <code>SqlDataSource</code></p>

<p>If I have to add more details let me know </p>

<hr>

<p>EDITS: </p>

<p>This page is for user to update his/her information</p>

<p>I'm setting the form values on <code>Page_Load</code> depending on the users information already exist in database.</p>

<p>the user edits his/her info and click [Save] </p>

<p>after setting <code>braekpoints</code>, I found that query string is taking the default values not the new ones. what should I do?</p>

<hr>

<p>The entire code:</p>

<pre><code>    protected void Page_Load(object sender, EventArgs e)
{
    Session["userID"] = Request.QueryString["id"];

        SqlConnection cn = new SqlConnection();
        cn.ConnectionString = ds.ConnectionString;
        cn.Open();

        SqlCommand cm = new SqlCommand();
        cm.Connection = cn;
        cm.CommandText = "select * from Users where UserID='" + Session["userID"].ToString() + "'";

        SqlDataReader dr;
        dr = cm.ExecuteReader();

        if (dr.Read())
        {
            uname.Text = dr["username"].ToString();
            fname.Text = dr["Fullname"].ToString();
            per.SelectedValue = dr["Permission"].ToString();
            email.Text = dr["Email"].ToString();
            phone.Text = dr["phone"].ToString();
        }
        else Response.Redirect("Default.aspx");
        dr.Close();
        cn.Close();

}
protected void Button3_Click(object sender, EventArgs e)
{

    ds.UpdateCommand = "update Users set Fullname='" + fname.Text + "', Permission='" + per.SelectedValue + "', Email='" + email.Text + "', phone='" + phone.Text + "' where UserID=" + Session["userID"].ToString();
    ds.Update();
    Response.Redirect("control_pan.aspx");

}
</code></pre>
