内容添加asp.net

  private void Button1_Click(object sender, System.EventArgs e)

  {

  if(this.IsValid){

  OleDbConnection conn=dbconn.createconn();

  conn.Open();

  OleDbCommand cmd=new OleDbCommand();

  cmd.CommandText="insert into a(title,content)values('"+this.title.Text.Trim().Replace("'","")+"','"+this.content.Text.Trim().Replace("'","")+"')";

  cmd.Connection=conn;

  try

  {

  cmd.ExecuteNonQuery();

  this.title.Text="";

  this.content.Text="";

  this.add_info.Text="提交成功";

  }

  catch

  {

  this.add_info.Text="出现错误";

  }

  finally{

  conn.Close();

  }

  }

  }