.Net上传文件方法

传新文件：<input id="File1" runat="server" name="myFile" style="width: 357px; height: 23px"
                    type="file" />
点击上传按钮触发的事件
protected void Button1_Click(object sender, EventArgs e)
        {
            if (File1.PostedFile != null)
            {
                try
                {
                    //上传文件的文件名（含完整路径）
                    string fileName = File1.PostedFile.FileName;
                    //上传文件的大小（byte）
                    int fileLength = File1.PostedFile.ContentLength;
                    string sMsg = null;
                    //判断文件大小是否超过200K
                    if (fileLength > (200*1024))
                    {
                        sMsg = fileName + "文件超过200K字节！";
                    }
                    else
                    {
                    //取文件名

                    string Randname = "//" + DateTime.Now.ToString("yyyyMMddhhmmss") + DateTime.Now.Ticks.ToString();
      //取文件的后缀名
                    string fileType = fileName.Substring(fileName.LastIndexOf(@"."));

                    fileName = Randname + fileType;

                    //使用SaveAs方法，将文件保存在项目路径/upload目录下
                    File1.PostedFile.SaveAs(HttpRuntime.AppDomainAppPath + @"/download1/" + fileName);
                    sMsg = "成功上传文件：" + fileName + "<br>文件大小：" + fileLength + "字节<br>" + "文件类型：" + File1.PostedFile.ContentType;
                    this.SaveToDB(fileName, fileLength, File1.PostedFile.ContentType);
                    this.BindData();
                    }
                    //使用Javascript显示操作结果信息
                    this.Literal1.Text = "<font color=red><b>" + sMsg + "</b></font>";
                }
                catch (Exception eeee)
                {
                    Response.Write(eeee.Message);
                }
            }
        }

    private void SaveToDB(string fileName2, string fileName3)
    {
        try
        {
            conn.ConnectionString = StrConn;         
            SqlCommand cmd2 = new SqlCommand();
            cmd2.CommandType = CommandType.StoredProcedure;
            cmd2.CommandText = "add_jingpin_img";
            cmd2.Connection = conn;
            conn.Open();
          
            cmd2.Parameters.Add("@datupian", fileName2);
            cmd2.Parameters.Add("@xiaotupian", fileName3);
            cmd2.Parameters.Add("@title", txtname.Text);
            cmd2.Parameters.Add("@jianjie", this.txtjianjie.Text);
            cmd2.ExecuteNonQuery();

            conn.Close();
        }
        catch (Exception exex)
        {
            Response.Write(exex.Message);
        }
        finally
        {
            conn.Close();
        }

    }