Update SQL table from VB multiple where condition - sql

Question

I am attempting to update an SQL table from VBA (with the below code)and cant seem to get it correct. I would like to update the columns one, two, three and four based on the search conditions of A, B, C, D, E. What am I getting wrong here? There is no error given, but the table just does not update? thank
Sub UpdateData(A As String, B As String, C As String, D As String, E As String, one As Double, two As Double, three As Double, four As Double)
Dim sA As String, sB As String, sC As String, sD As String, sDesk As String, sE As String
Dim sone As Double, stwo As Double, sthree As Double, sfour As Double
Dim objConn As ADODB.Connection
Set objConn = New ADODB.Connection
objConn.ConnectionString = "Provider=SQLOLEDB;Data Source=source;Initial Catalog=Model_table;Integrated Security=SSPI"
objConn.Open
Set objRec = New ADODB.Recordset
Date = Format(Range("date").Value, "YYYY-MM-DD")
sA = A
sB = B
sC = C
sD = D
sE = E
sone = one
stwo = two
sthree = three
sfour = four
StrSQL = "UPDATE pnl_results SET (" & sone & "," & stwo & "," & sthree & "," & sfour & ") Where ('" & date = sDate & "', '" & AA= sA & _
"','" & BB= sB & "','" CC= & sC & "','" & DD= sD & "','" & EE=sE & ")"
Set objRec = objConn.Execute(StrSQL)
objConn.Close
Set objConn = Nothing
End Sub

Answer 1

There are several errors in your code:
You don't need parentheses.
Put the column names directly in the string, don't surround them with apostrophes.
Surround all string values with apostrophes.
Use AND or OR operator to combine different conditions, not a comma.
Try this:
StrSQL = "UPDATE pnl_results SET " & _
" one = '" & sone & _
"', two = '" & stwo & _
"', three = '" & sthree & _
"', four = '" & sfour & _
"' Where date = '" & sDate & _
"' AND AA = '" & sA & _
"' AND BB = '" & sB & _
"' AND CC = '" & sC & _
"' AND DD = '" & sD & _
"' AND EE = '" & sE & "'"
As mentioned in the comments, using inline query with values coming directly from user input makes your code open to SQL injection attacks. Either validate user input before using it in the query, or better use a parameterized query.

Answer 2

You are confusing the syntax between an Update and an Insert Into. It should look more like this:
StrSQL = "UPDATE pnl_results SET field1='value1', field2='value2' WHERE field3='value3' AND field4='value4'