往MSSQL数据库添加单条数据

        string usn = Request.Form["username"].Trim();
        string pwd = Request.Form["password"].Trim();

        SqlConnection conn = new SqlConnection(ConfigurationSettings.AppSettings["connStr"]);
        conn.Open();

        SqlCommand comm = new SqlCommand("insert into hello_member(usn,pwd) values ('"+usn+"','"+pwd+"')",conn);
        comm.ExecuteNonQuery();

        conn.Close();

        Response.Write("<script language=javascript>alert('添加成功!')</script>");


web.config中设置:
  <appSettings>
    <add key="connStr" value="server=.;uid=sa;pwd=123456;database=hello;"/>
    </appSettings>