I can't insert a record in database: "Invalid Column Name"

Question

create PROCEDURE [dbo].[pro_InsertRecord]

      @table      varchar(30)   , 
      @field      varchar(max)  ,
      @value      varchar(max)
AS
SET NOCOUNT ON

BEGIN

 EXEC('INSERT INTO ' + @table + '(' + @field + ') VALUES ( '+ @value +')')

END

I can't insert a record in database but i receive an insert error message as "Invalid Column Name"

my code:

string fieldnames = "Login_UserName, Login_Password, Login_Role_Id";

---

  string fieldvalues =  UserName +"','" + Password + "'," + Role ; 

---

com.Common.InsertRecord("Login", fieldnames, fieldvalues);

Answer 1

Instead of

string fieldvalues =  UserName +"','" + Password + "'," + Role ; 

use

string fieldvalues = "'" + UserName + "','" + Password + "'," + Role ;