Sql_connection

Insert.sql

 string connectionString = "Data Source=ARBAAZLPT\\SQLEXPRESS;Initial Catalog=bi;User ID=sa;  Password=123456;";
            SqlConnection sqlConnection=new SqlConnection(connectionString);
            string insertStatement = "INSERT INTO comment(dashboard,userid,tab,comment,date,timestamp,chartdesc) VALUES ('" + DashboardList.SelectedValue + "','" + userid_text.Text + "','" + chartList.SelectedValue + "','" + coment_txt.Text + "','" + dt+ "', GETDATE(),'"+ chart_desc.Text + "')";
           // string insertStatement = "INSERT INTO comment(dashboard,userid,tab,comment,date,chartdesc)VALUES ('mydashboard','myuserid','mytab','mycomment','02-20-1990','mychartdesc')";
            SqlCommand sqlCommand=new SqlCommand(insertStatement,sqlConnection);
            
            try
{
sqlConnection.Open();
sqlCommand.ExecuteNonQuery();

}
finally
{
sqlConnection.Close();
}