Inserting data in my DB but there is an exception C# asp.net -

me da error al subir un archivo , me dice que el error se encuentra en cmm1.executenonquery(); la verdad no entiendo por que ocurre el error, alguien puede decirme cual es el problema pls. gracias.

el error es este error: system.data.sqlclient.sqlexception (0x80131904): incorrect syntax near 'puebla'. en system.data.sqlclient.sqlconnection.onerror(sqlexception exception, boolean breakconnection, action1 wrapcloseinaction) en system.data.sqlclient.tdsparser.throwexceptionandwarning(tdsparserstateobject stateobj, boolean callerhasconnectionlock, boolean asyncclose) en system.data.sqlclient.tdsparser.tryrun(runbehavior runbehavior, sqlcommand cmdhandler, sqldatareader datastream, bulkcopysimpleresultset bulkcopyhandler, tdsparserstateobject stateobj, boolean& dataready) en system.data.sqlclient.sqlcommand.runexecutenonquerytds(string methodname, boolean async, int32 timeout, boolean asyncwrite) en system.data.sqlclient.sqlcommand.internalexecutenonquery(taskcompletionsource1 completion, string methodname, boolean sendtopipe, int32 timeout, boolean& usedcache, boolean asyncwrite, boolean inretry) en system.data.sqlclient.sqlcommand.executenonquery() en uploadf.fileup_click(object sender, eventargs e) en c:\inetpub\wwwroot\pec\ufile.aspx.cs:línea 295 clientconnectionid:7ec41d39-bd92-4ce5-813d-02d4a603c3e6 error number:102,state:1,class:15insert ufiles(ufile_id_in,ufile_id_con,ufile_fss,ufile_uploadtime,ufile_filesize,ufile_filename,ufile_periodo,ufile_nfinal)select 1,isnull(max(ufile_id_con),0)+1 idcon,1,'28/07/2017 12:03:56 p.m.','57.00 kb','logo repuve puebla.png','t2',ur100 .ind1.f1.t2.nlogo repuve puebla.pngfrom ufileswhere ufile_id_in=1

     fileupload1.saveas(server.mappath("~/data/")+"ur"+session["ur"]+"."+"ind"+session["ind_temp"]+"."+"f"+session["fondo_sistema"]+"."+session["trim"]+"."+"n"+fileupload1.filename);session["ufile"]=("ur"+session["ur"]+"."+"ind"+session["ind_temp"]+"."+"f"+session["fondo_sistema"]+"."+session["trim"]+"."+"n"+fileupload1.filename);      label11.text = "se cargo correctamente el archivo:";     label8.text = fileupload1.filename;    // button4.visible = true;    try     { if (cnnpec.state == connectionstate.closed)           cnnpec.open();           sqltransaction transactaudit = cnnpec.begintransaction(isolationlevel.readcommitted);           try           {using (cmm1 = new sqlcommand())               {   cmm1.commandtype = commandtype.text;                   cmm1.connection = cnnpec;                   cmm1.transaction = transactaudit;                   strsqlu = "insert ufiles(ufile_id_in,ufile_id_con,ufile_fss,ufile_uploadtime,ufile_filesize,ufile_filename,ufile_periodo,ufile_nfinal)" + "select " + session["ind_temp"] + ",isnull(max(ufile_id_con),0)+1 idcon," + session["fondo_sistema"] + ",'" + session["stime"] + "','" + session["filesize"] + "','" + fileupload1.filename + "','" + session["trim"] + "'," + session["ufile"] + "" + "from ufiles" + "where ufile_id_in=" + session["ind_temp"];                  //  controls.add(new literalcontrol("<script>javascript:alert('tiempo: " + session["stime"] + "');</script>"));                 //  controls.add(new literalcontrol("<script>javascript:alert('nombre:" + fileupload1.filename + "');</script>"));                    cmm1.commandtext = strsqlu;                   cmm1.executenonquery();                   transactaudit.commit();                                    controls.add(new literalcontrol("<script>javascript:alert('archivo: se guardó correctamente.');</script>"));                       //controls.add(new literalcontrol("<script>javascript:alert('archivo: se guardó correctamente.');window.location.reload();</script>"));                //controls.add(new literalcontrol("<script>window.location.reload();</script>"));                 } //dipose implicito del objeto sqlcommand cmmaudit             }            catch (exception ex)            {   transactaudit.rollback();                transactaudit.dispose();                label11.visible = true;                label8.text = "archivo no cargado";                master.labelinforma.text = string.format("error: " + ex + strsqlu);                controls.add(new literalcontrol("<script>javascript:alert('no se guardo apropiadamente');</script>"));            }        }               {  cnnpec.close(); }//llave 

missing string delimiter around session("ufile") , missing space before from