ASP. NET Backup Recovery SQL Server database

Back up the sqlserver database:
String sqlstr1 = "Server = (local); database = '" + this. dropdownlist1.selectedvalue + "'; uid = sa; Pwd = ";
String sqlstr2 = "backup database" + this. dropdownlist1.selectedvalue + "to disk = '" + this. textbox1.text. Trim () + ". Bak '";
Sqlconnection con = new sqlconnection (sqlstr1 );
Con. open ();
Try
{
If (file. exists (this. textbox1.text. Trim ()))
{
Response. Write ("<script language = JavaScript> alert ('this file already exists. Please input it again! '); Location = 'default. aspx' </SCRIPT> ");
Return;
}
Sqlcommand COM = new sqlcommand (sqlstr2, con );
Com. executenonquery ();
Response. Write ("<script language = JavaScript> alert ('data backed up successful! '); Location = 'default. aspx' </SCRIPT> ");
}
Catch (Exception error)
{
Response. Write (error. Message );
Response. Write ("<script language = JavaScript> alert ('data backup failed! ') </SCRIPT> ");
}
Finally
{
Con. Close ();
}
Restore the sqlserver database:
String Path = This. fileupload1.postedfile. filename; // obtain the backup path and database name.
String dbname = This. dropdownlist1.selectedvalue;
String sqlstr1 = "Server = (local); database = '" + this. dropdownlist1.selectedvalue + "'; uid = sa; Pwd = ";
String sqlstr2 = "use master Restore database" + dbname + "from disk = '" + path + "'";
Sqlconnection con = new sqlconnection (sqlstr1 );
Con. open ();
Try
{
Sqlcommand COM = new sqlcommand (sqlstr2, con );
Com. executenonquery ();
Response. Write ("<script language = JavaScript> alert ('data restored successfully! '); Location = 'default. aspx' </SCRIPT> ");
}
Catch (Exception error)
{
Response. Write (error. Message );
Response. Write ("<script language = JavaScript> alert ('data restoration failed! ') </SCRIPT> ");
}
Finally
{
Con. Close ();
}