net上傳代碼

界面設計：

一個DropDownList1 一個textbox按鈕   一個File1控件 一個botton

 private void Button1_Click(object sender, System.EventArgs e)
  {
   if(this.File1.PostedFile.ContentLength==0)
   {
    this.Label1.Text="上傳失敗";
    
   }
   else
   {
    UpFile();
    this.Label1.Text="上傳成功";
   } 
  }
  void UpFile()
  {
//   String FullFileName=this.File1.PostedFile.FileName;
//   String FileName=FullFileName.Substring(FullFileName.LastIndexOf("//")+1);
//   
//   this.File1.PostedFile.SaveAs(Server.MapPath("file")+"//"+FileName);
//   System.Data.SqlClient.SqlConnection s_conn = DB.CreateDB();
//   System.Data.SqlClient.SqlCommand s_comm = new System.Data.SqlClient.SqlCommand();
//   s_comm.Connection = s_conn;
//   
//   s_comm.CommandText = string.Format("insert into news (Newstime,NewsName,URL,redge) values ('{0}','{1}','{2}','{3}')",
//   //DateTime.Now.ToString("yyyy/MM/dd"),
//   (this.TextBox1.Text).ToString(),
//   FileName, string.Format("file/{0}",FileName),this.DropDownList1.SelectedValue);
//   
//   s_conn.Open();
//   s_comm.ExecuteNonQuery();
//   s_conn.Close();

   String FullFileName=this.File1.PostedFile.FileName;
   String FileName=FullFileName.Substring(FullFileName.LastIndexOf("//")+1);
   //int  dd=Convert.ToInt32((this.DropDownList1.SelectedValue).ToString());
   int  dd=Convert.ToInt32((this.DropDownList1.SelectedIndex).ToString());
   if(dd==1)
   {
    this.File1.PostedFile.SaveAs(Server.MapPath("file/file1")+"//"+FileName);
    System.Data.SqlClient.SqlConnection s_conn = DB.CreateDB();
    System.Data.SqlClient.SqlCommand s_comm = new System.Data.SqlClient.SqlCommand();
    s_comm.Connection = s_conn;
   
    s_comm.CommandText = string.Format("insert into news (Newstime,NewsName,URL,redge) values ('{0}','{1}','{2}','{3}')",
     //DateTime.Now.ToString("yyyy/MM/dd"),
     (this.TextBox1.Text).ToString(),
     FileName, string.Format("file/file1/{0}",FileName),this.DropDownList1.SelectedValue);
   
    s_conn.Open();
    s_comm.ExecuteNonQuery();
    s_conn.Close();
   }