ปัญหาเรื่อง คำสั่ง sql ครับ ช่วยดูหน่อยนะ.......................

Private Sub DgvEmployee_RowHeaderMouseClick(ByVal sender As Object, ByVal e As System.Windows.Forms.DataGridViewCellMouseEventArgs) Handles DgvCustomer.RowHeaderMouseClick
        frmManagement_SpareParts.Show()


        Dim objConn As SqlConnection = getDriver()
        objConn.Open()
        Dim Spare_C_Brand_ID As String = DgvCustomer.Rows.Item(e.RowIndex).Cells(0).Value.ToString()
        Dim Brand_C_Name As String = DgvCustomer.Rows.Item(e.RowIndex).Cells(0).Value.ToString()
        Dim SqlString As String = "SELECT* from Spare_Part where   Spare_C_Brand_ID = '" + Spare_C_Brand_ID + " 'Brand_C_Name='" + Brand_C_Name + "'"


    
      
        Dim sqlCom2 As SqlCommand = New SqlCommand(SqlString, objConn)
        Dim reader As SqlDataReader = sqlCom2.ExecuteReader()
        reader.Read()

        frmManagement_SpareParts.txts.Text = Spare_C_Brand_ID
        frmManagement_SpareParts.Brand_ID.Text = Spare_C_Brand_ID





        reader.Close()
        objConn.Close()





    End Sub

Dim SqlString As String = " SELECT * FROM spare_part WHERE Spare_C_Brand_ID = '" & XXXXX & "'  AND Brand_C_Name = '"& YYYY & "' ";