CinderellaMGS.SQL_Queries.setCinderellaDetails C# (CSharp) Method

        public void setCinderellaDetails(string ID, string dressSize, string shoeSize, int altered, string notes, string time, string Fname, string Lname)
        {
            string query, query1;
            query = "IF EXISTS (SELECT * FROM Package WHERE cinderellaID=" + ID + ") UPDATE Package SET dressSize=" + dressSize + ", shoeSize=" + shoeSize + ", dressAltered=" + altered + ", checkoutNotes='" + notes + "', whenAvailable='" + time + "' WHERE cinderellaID=" + ID + " ELSE INSERT INTO Package VALUES (" + ID + ", " + dressSize +", " + shoeSize + ", " + altered + ", '" + notes + "', '" + time + "')";
            query1 = "IF EXISTS (SELECT * FROM Cinderella WHERE ID=" + ID + ") UPDATE Cinderella SET firstName='" + Fname + "', lastName='" + Lname + "' WHERE ID=" + ID;
            database.ExecuteQuery(query);
            database.ExecuteQuery(query1);
        }