عملية تحديث البيانات

السلام عليكم ورحمة الله وبركاته

إستفسار بسيط انا بحاول اعمل تعديل للبيانات بظهرلى المشكلة التالية

مرفق الكود والمشكلة التى تظهر

الكود :

    protected void BtnUpdate_Click(object sender, EventArgs e)
    {
        if (FileUpload1.HasFile == true && FileUpload1.PostedFile != null)
        {
            int _size = 10485760;// equal 9 mb
            string _fileExt = System.IO.Path.GetExtension(FileUpload1.FileName);
            if (_fileExt.ToLower() == ".pdf" || _fileExt.ToLower() == ".jpg" || _fileExt.ToLower() == ".gif" || _fileExt.ToLower() == ".png" || _fileExt.ToLower() == ".pmb")
            {
                if (FileUpload1.PostedFile.ContentLength <= _size)
                {
                    string FileName = Path.GetFileName(FileUpload1.PostedFile.FileName);
                    FileUpload1.SaveAs(Server.MapPath("~/images/Members/" + FileName));

                    SqlConnection con = new SqlConnection(ConfigurationManager.ConnectionStrings["GEUConnectionString"].ToString());
                    //Open the database connection
                    con.Open();
                    //Passing parameters to query
                    SqlCommand cmd = new SqlCommand("update Membership set MembUserName=@MembUserName,MembPssword=@MembPssword,MembEmail=@MembEmail,MembSecureQ=@MembSecureQ,MembSecureA=@MembSecureA,MembFullName=@MembFullName,CountryID=@CountryID,CityID=@CityID,MembAddress@MembAddress,MembPhone=@MembPhone,MembMobile=@MembMobile,PhotName=@PhotName,PhotPath=@PhotPath where Membership_ID=12", con);
                    //Passing parameters to query
                    cmd.Parameters.AddWithValue("@MembUserName", TBNUserName.Text);
                    cmd.Parameters.AddWithValue("@MembPssword", TBNPassword.Text);
                    cmd.Parameters.AddWithValue("@MembEmail", TBNEmail.Text);
                    cmd.Parameters.AddWithValue("@MembSecureQ", TBSecureQ.Text);
                    cmd.Parameters.AddWithValue("@MembSecureA", TBSecureA.Text);
                    cmd.Parameters.AddWithValue("@MembFullName", TBNFullName.Text);
                    cmd.Parameters.AddWithValue("@CountryID", DDLCountries.SelectedValue);
                    cmd.Parameters.AddWithValue("@CityID", DDLCities.SelectedValue);
                    cmd.Parameters.AddWithValue("@MembAddress", TBAddress.Text);
                    cmd.Parameters.AddWithValue("@MembPhone", TBPhone.Text);
                    cmd.Parameters.AddWithValue("@MembMobile", TBMMobaile.Text);
                    cmd.Parameters.AddWithValue("@PhotName", FileName);
                    cmd.Parameters.AddWithValue("@PhotPath", "~/images/Members/" + FileName);
                    cmd.ExecuteNonQuery();

                    //Close dbconnection
                    con.Close();
                    LblMasg.Text = "تم التعديل بنجاح";

                }
                else
                {
                    FileUpload1.Focus();
                    ClientScript.RegisterStartupScript(Type.GetType("System.String"), "messagebox", "<script type=\"text/javascript\">alert('Max file size is 9 m.b');</script>");
                }

            }
            else
            {
                FileUpload1.Focus();
                ClientScript.RegisterStartupScript(Type.GetType("System.String"), "messagebox", "<script type=\"text/javascript\">alert('Only doc or docx are allowed');</script>");
            }
        }
    }