code for website

using System; using System.Collections; using System.Configuration; using System.Data; using System.Linq; using System.Web; using System.Web.Security; using System.Web.UI; using System.Web.UI.HtmlControls; using System.Web.UI.WebControls; using System.Web.UI.WebControls.WebParts; using System.Xml.Linq; using System.Data.SqlClient; namespace Register_using_param { public partial class _Default : System.Web.UI.Page { public string GetConnectionString() { //sets the connection string from your web config file "ConnString" is the name of your Connection String return System.Configuration.ConfigurationManager.ConnectionStrings["MyConsString"].ConnectionString; } private void ExecuteInsert(string name, string username, string password, string gender, string age, string address) { SqlConnection conn = new SqlConnection(GetConnectionString()); string sql = "INSERT INTO tblRegistration (Name, UserName, Password, Gender, Age, Address) VALUES (@Name,@UserName,@Password,@Gender,@Age,@Address)"; try { conn.Open(); SqlCommand cmd = new SqlCommand(sql, conn); SqlParameter[] param = new SqlParameter[6]; param[0] = new SqlParameter("@Name", SqlDbType.VarChar, 50); param[1] = new SqlParameter("@UserName", SqlDbType.VarChar, 50); param[2] = new SqlParameter("@Password", SqlDbType.VarChar, 50); param[3] = new SqlParameter("@Gender", SqlDbType.Char, 10); param[4] = new SqlParameter("@Age", SqlDbType.Int, 100); param[5] = new SqlParameter("@Address", SqlDbType.VarChar, 50); param[0].Value = name; param[1].Value = username; param[2].Value = password; param[3].Value = gender; param[4].Value = age; param[5].Value = address; for (int i = 0; i < param.Length; i++) { cmd.Parameters.Add(param[i]); } cmd.CommandType = CommandType.Text; cmd.ExecuteNonQuery(); } catch (System.Data.SqlClient.SqlException ex) { string msg = "Insert Error:"; msg += ex.Message; throw new Exception(msg); } finally { conn.Close(); } } protected void btn_register_Click(object sender, EventArgs e) { if (TxtPassword.Text == TxtRePassword.Text) { //call the method to execute insert to the database ExecuteInsert(TxtName.Text, TxtUserName.Text, TxtPassword.Text, DropDownList1.SelectedItem.Text, TxtAge.Text, TxtAddress.Text); Response.Write("Record was successfully added!"); ClearControls(Page); } else { Response.Write("Password did not match"); TxtPassword.Focus(); } } public static void ClearControls(Control Parent) { if (Parent is TextBox) { (Parent as TextBox).Text = string.Empty; } else { foreach (Control c in Parent.Controls) ClearControls(c); } } } }