Implementation of passing parameters to execute SQL statements

Functions of the two methods in sqldbhelper. CS:

/**/ ///   <Summary>
/// Execute the SQL statement and return the number of affected records
///   </Summary>
///   <Param name = "sqlstring"> SQL statement </Param>
///   <Param name = "paiparms"> Parameter Array </Param>
///   <Returns> Number of affected records </Returns>
Public   Int Executesql ( String Sqlstring, Params Sqlparameter [] parameter parms)
{
Using (Sqlconnection connection =   New Sqlconnection (strconn ))
{
Using (Sqlcommand cmd =   New Sqlcommand ())
{
Try
{
Preparecommand (CMD, connection, Null , Sqlstring, callback parms );
Int Rows = Cmd. executenonquery ();
Cmd. Parameters. Clear ();
Return Rows;
}
Catch (System. Data. sqlclient. sqlexception E)
{
Throw NewException (E. Message );
}
}
}
}

Private   Void Preparecommand (sqlcommand cmd, sqlconnection Conn, sqltransaction trans, String Parameter text, sqlparameter [] parameter parms)
{
If (Conn. State ! = Connectionstate. open)
Conn. open ();
Cmd. Connection = Conn;
Cmd. commandtext = Plain text;
If (Trans ! =   Null )
Cmd. Transaction = Trans;
Cmd. commandtype = Commandtype. text;
If (Partition parms ! =   Null )
{
Foreach(Sqlparameter parmInCmdparms)
Cmd. Parameters. Add (parm );
}
}

In the backgroundCodeMedium:

  Protected   Void Imagebutton1_click ( Object Sender, imageclickeventargs E)
{

Sqlparameter [] Parameters =   {

New Sqlparameter ( " @ Username " , Sqldbtype. nvarchar, 256 ),
New Sqlparameter ( " @ Realname " , Sqldbtype. varchar, 250 )
} ;
Parameters [ 0 ]. Value =   " Sea " ;
Parameters [ 1 ]. Value =   " GXC " ;


SDH. executesql ( " Insert into [TFM]. [DBO]. [userinfo] ([username], [realname]) values (@ username, @ realname) " , Parameters );


Response. Write ( " <SCRIPT> alert ('added successfully! '); </SCRIPT> " );
}