谁能解决一下，运行时说我的字符串格式不正确

private void button1_Click(object sender, EventArgs e)
{
SqlConnection con = new SqlConnection("Server=LAPTOP-R9HCP7V2\MSSQLSERVERYU; User Id =sa; Pwd=1423731160; DataBase=db_EMS");
string strsq1 = "insert into tb_PDic(Name,Money) values('" + textBox1.Text + "'," + Convert.ToDecimal(textBox2.Text) + ")";
SqlCommand comm = new SqlCommand(strsq1, con);
if (con.State == ConnectionState.Closed)
{
con.Open();
}
if (Convert.ToInt32(comm.ExecuteNonQuery()) > 0)
{
label1.Text = "添加成功";
}
else
{
label1.Text = "添加失败";
}
con.Close();
}

strsq1本身就是拼接字符串，Convert.ToDecimal(textBox2.Text) 不需要转格式，直接textBox2.Text