com.microsoft.sqlserver.jdbc.SQLServerException: 没有为参数号 6 设置值，这是什么异常啊？

部分代码如下： 
String uri="jdbc:sqlserver://127.0.0.1:1433;DatabaseName=Message";
        if(name==null)
           name="";
        if(password==null)
           password="";
        boolean isLD=true;
        for(int i=0;i<name.length();i++)
        {  char c=name.charAt(i);
           if(!((c<='z'&&c>='a')||(c<='Z'&&c>='A')||(c<='9'&&c>='0'))) 
             isLD=false;
        } 
        boolean boo=name.length()>0&&password.length()>0&&isLD;
        String backNews="";
        try{ con=DriverManager.getConnection(uri,"sa","sa");
             String insertCondition="INSERT INTO member VALUES (?,?,?,?,?)";
             sql=con.prepareStatement(insertCondition);
             if(boo)
             { sql.setString(1,handleString(name));
               sql.setString(2,handleString(password));
               sql.setString(3,handleString(email));
               sql.setString(4,handleString(birthday));
               sql.setString(5,phone);
               int m=sql.executeUpdate();
               if(m!=0)
                 {  backNews="注册成功";
                    reg.setBackNews(backNews);
                    reg.setName(name);
                    reg.setPassword(handleString(password));
                    reg.setEmail(handleString(email));
                    reg.setBirthday(handleString(birthday));
                    reg.setPhone(phone);
                   
                 }
              }
             else
              {  backNews="信息填写不完整或名字中有非法字符";
                 reg.setBackNews(backNews);  
              }
             con.close();
           }
        catch(SQLException exp)
          {  backNews="该会员名已被使用，请您更换名字"+exp;
             reg.setBackNews(backNews); 
          }