插入数据Parameters.add

StrSql = "insert into UserInfo (UserName,UserPassword) values(@UserName,@UserPassword)";
SqlCommand MyComm = new SqlCommand(StrSql,MyConn);
MyComm.Parameters.Add("@UserName",SqlDbType.VarChar,20);
MyComm.Parameters.Add("@UserPassword",SqlDbType.VarChar,20);
MyComm.Parameters["@UserName"].Value = this.TextBox1.Text;
MyComm.Parameters["@UserPassword"].Value = this.TextBox2.Text;

MyComm.ExecuteNonQuery();