参数话的SQL语句

   string cmdStr="insert table1 values(@name, @data)";
   //SqlConnection conn=new SqlConnection("server=localhost; integrated security=sspi; database=northwind");
   SqlConnection conn=new SqlConnection("server=tipsun_server; uid=sa; database=northwind");

   SqlCommand cmd=new SqlCommand(cmdStr, conn);

   SqlParameter pm=new SqlParameter("@name", SqlDbType.VarChar,50);
   SqlParameter pm1=new SqlParameter("@data", SqlDbType.Image);

   pm.Value=值;
   pm1.Value=值;

   cmd.Parameters.Add(pm);
   cmd.Parameters.Add(pm1);

   conn.Open();
   cmd.ExecuteNonQuery();
   conn.Close();