In sql1 you're forgetting the single quotes around txtUserName.
It wouldn't hurt to use txtUsername.Text (I'm guessing txtusername is the name of a textbox), or to set a string variable to the value in txtUserName and use that in the SQL instead.