asp.net的简易的参数化查询

 protected void btnInsert_Click(object sender, EventArgs e)
     {
         string sql = "insert into contactgroup(groupname,memo) values(@groupName,@memo)";
         string groupName = txtGroupName.Text.Trim();
         string memo = txtMemo.Text.Trim();
         if (groupName != "" || memo != "")
         {
             using (SqlConnection conn = new SqlConnection(DBHelper.ContactsConnstr))
             {
                 conn.Open();
                 SqlCommand cmd = new SqlCommand(sql, conn);
                 cmd.Parameters.AddWithValue("@groupName", groupName);
                 cmd.Parameters.AddWithValue("@memo", memo);
                 if (cmd.ExecuteNonQuery() > )
                 {
                     Response.Write("成功写入！");
                 }
                 else
                 {
                     Response.Write("写入失败！");
                 }
             }
         }
         else
         {
             Response.Write("输入不能为空！");
             txtGroupName.Focus();
         }     }