Ошибка синтаксиса в инструкции UPDATE

String^ query = "UPDATE [Database] SET Login= '" + login + "', Password = " + password + ", Reservation = " + reservation + " WHERE id = " + id;
OleDbCommand^ dbCommand = gcnew OleDbCommand(query, dbConnection);