C#删除SQL某一行 从用户名或者其他参数

            string MyConn = "server=.;uid=sa;pwd=****;database=shujukuming;Max Pool Size = 512;";
            SqlConnection MyConnection = new SqlConnection(MyConn);


            string MyDelete = "Delete  from zaocan where 用户名='" + this.Label1.Text + "'  and 传入时段='" + DateTime.Now.ToString("yyyy-MM-dd") + "' ";




            SqlCommand MyCommand = new SqlCommand(MyDelete, MyConnection);
            try
            {
                MyConnection.Open();
                MyCommand.ExecuteNonQuery();
                MyConnection.Close();

            }
            catch (Exception ex)
            {
                Console.WriteLine("{0} Exception caught.", ex);
            }


winform代码