如何往access数据库中插数据。急！！！

Question

strSQL = "INSERT INTO Comments (docGuid,Content,UserName,email,ip) VALUES('"+DocGuid.Value+"','" + Comments.Text.Replace("'","''") + "','" + CommentsUserName + "','" + email.Text.Replace("'","''") + "','" + Request.UserHostAddress.ToString() + "')";
    cmd.CommandText = strSQL;
    cmd.ExecuteNonQuery();

Answer 1

sqlstr = "insert into Random(decF,decX) values(@decF,@decX)"
                sqlCommd.Parameters.Add("@decF", Random.NextDouble())
                sqlCommd.Parameters.Add("@decX", Random.NextDouble())
                sqlCommd.CommandText = sqlstr
                sqlCommd.ExecuteNonQuery