Please, never use this concat form:
String st = "UPDATE supplier SET supplier_id = " + textBox1.Text + ", supplier_name = " + textBox2.Text
+ "WHERE supplier_id = " + textBox1.Text;
use:
command.Parameters.AddWithValue("@attribute", value);
Always work object oriented
Edit: This is because when you parameterize your updates it helps prevent SQL injection.