麻烦帮我看看sql语句这样写对吗??

DataGridItem t = e.Item;
   string ItemName = ((TextBox)t.FindControl("TextBox4")).Text;
   string TypeName =((DropDownList)t.FindControl("DropDownList3")).SelectedValue.ToString();
   string SZName =((DropDownList)t.FindControl("DropDownList4")).SelectedValue.ToString();
   string ShowName = ((TextBox)t.FindControl("TextBox5")).Text;
   string sql = "update  TrafficTable set TrafficItemName='" + ItemName + "',TrafficeType='" + TypeName + "',TrafficeFixation='" + SZName + "',TrafficeExplain='" + ShowName + "' where TrafficID=" + ();