c#中SQL语句参数标准写法

SqlConnection conn=new SqlConnection("da ta source=ccserver;user id=sa;password=****;initial catalog=cym1");
　　SqlCommand cmd =new SqlCommand("insert into uploadfile (filename) values (@filename)",conn);
　　SqlParameter sp=new SqlParameter("@filename",SqlDbType.VarChar,256);
　　sp.Value="1.jpg";
　　conn.Open();
　　cmd.ExecuteNonQuery();
　　conn.Close();
　　在SQLSERVER中，SQL语句参数是@+参数名，
　　insert into uploadfile (filename) values (@filename)
　　在定义此参数的参数变量里面参数要写@
　　SqlParameter sp=new SqlParameter("@filename",SqlDbType.VarChar,256);