在线等 急

this.oleDbCon.Open();string sql_login="Select * from user where ID='" + this.text_userID.Text.Trim() + "' and Name='" + this.text_userName.Text.Trim() + "' and Password='" + this.text_PSW.Text.Trim() + "' and level='" + this.ddlist_userLevel.SelectedValue.ToString()+"'";

OleDbCommand cmd_login=new OleDbCommand(sql_login,this.oleDbCon);
            
int rownum =cmd_login.ExecuteNonQuery();

if(rownum==1)
this.Response.Write("<script lanuage=javascript>alert('已登录')</script>");
else
        this.Response.Write("<script lanuage=javascript>alert('登录失败')</script>");
老是说我FROM子句不对 请大家帮一下 问题出在哪？