Asp.net drop text format data into the database code

Copy codeThe Code is as follows:
StreamReader sr = new StreamReader ("E: \ 123.txt"); // file path
String oneLine;
While (oneLine = sr. ReadLine ())! = Null)
{
String [] str = oneLine. Split ('| ');
String SQL = "insert into TableDX (number, name, produce, xinghao) values ('" + str [0]. toString () + "','" + str [1]. toString (). replace ("'", "'") + "','" + str [2]. toString () + "','" + str [3]. toString () + "')";
String strConn = "Data Source =.; Initial Catalog = master; User ID = sa; Password = sa"; // connection string
SqlConnection conn = new SqlConnection (strConn );

Int res = 0;
Conn. Open ();
SqlCommand cmd = new SqlCommand (SQL, conn );
Res = cmd. ExecuteNonQuery ();
Conn. Close ();
}
Sr. Close ();
This. Response. Write ("<script> alert ('imported successfully'); </script> ");