当我更新任何记录时，整个表都被相同的记录（行）更新，我正在尝试下面的代码。我也尝试过连接，但有人告诉我关于sql注入。

con.Open();
try
{
    OleDbCommand cmd = new OleDbCommand();
    cmd.Connection = con;
    cmd.CommandType = CommandType.Text;
    cmd.CommandText = @"UPDATE emptable 
                        SET EmpName=@EmpName, Age=@Age ,Mobile=@Mobile,  
                            Designation=@Designation ,Salary=@Salary ,  
                            joiningDate=@joiningDate ,Address=@Address,  
                            AccountNo=@AccountNo,  
                            AccountHoldersName=@AccountHoldersName,  
                            BankName=@BankName,IFSC=@IFSC, 
                            EmpCode=@EmpCode,UINPANNO=@UINPANNO,
                            Whatsapp=@Whatsapp,FathersName=@FathersName,
                            MaritalStatus=@MaritalStatus,Email=@Email 
                     WHERE Mobile= Mobile";
    cmd.Parameters.AddWithValue("@EmpName", EmpNametxtbx.Text);
    cmd.Parameters.AddWithValue("@Age", Agetxtbx.Text);
    cmd.Parameters.AddWithValue("@Mobile", Mobiletxtbx.Text);
    cmd.Parameters.AddWithValue("@Designation", Designationcmbbx.Text);
    cmd.Parameters.AddWithValue("@Salary", Salarytxtbx.Text);
    cmd.Parameters.AddWithValue("@JoiningDate", dTP1.Text);
    cmd.Parameters.AddWithValue("@Address", Addresstxtbx.Text);
    cmd.Parameters.AddWithValue("@AccountNo", Accounttxtbx.Text);  
    cmd.Parameters.AddWithValue("@AccountHoldersName", Holderstxtbx.Text);
    cmd.Parameters.AddWithValue("@BankName", Banktxtbx.Text);
    cmd.Parameters.AddWithValue("@IFSC", Ifsctxtbx.Text);
    cmd.Parameters.AddWithValue("@EmpCode", EmpCodetxtbx.Text);
    cmd.Parameters.AddWithValue("@UINPANNO", Uptxtbx.Text);
    cmd.Parameters.AddWithValue("@Whatsapp", Whatsapptxtbx.Text);
    cmd.Parameters.AddWithValue("@FathersName", Fatherstxtbx.Text);
    cmd.Parameters.AddWithValue("@MaritalStatus", MStatuscmbbx.Text);
    cmd.Parameters.AddWithValue("@Email", Emailtxtbx.Text);

    cmd.ExecuteNonQuery();
    MessageBox.Show("record update");

    //refresh or update table 
    OleDbCommand cmd1 = new OleDbCommand();
    cmd1.Connection = con;
    string query = "select * from emptable";
    cmd1.CommandText = query;
    OleDbDataAdapter da = new OleDbDataAdapter(cmd1);
    DataTable dt = new DataTable();
    da.Fill(dt);
    dataGridView1.DataSource = dt;
}
catch (Exception ex)
{
    MessageBox.Show("error   " + ex);
}

//  Clear();
con.Close();