asp.net在数据库中增加记录操作

SQL语句中如果引用C#中的变量必须转化为字符串形式，且必须用单引号包含。

string insertString = "Insert INTO question(name,sex,comment) VALUES(" +"'"+ Name +"'"+ "," +"'"+ strSex +"'"+ "," +"'"+ strMsg + "'" + ")";

string connectionString=@"Provider=Microsoft.Jet.OLEDB.4.0;"
                                +@"Data Source=C:\wwwnet\App_Data\DB\message.mdb";
        OleDbConnection conn = new OleDbConnection(connectionString);
        
       
        String Name=studentName.Text.ToString();   
        String strSex="";
        if(RadioButton1.Checked)
            strSex="男";
        if(RadioButton2.Checked)
           strSex="女";
        String strMsg=TextBox1.Text.ToString();
 

         conn.Open();

        string insertString = "Insert INTO question(name,sex,comment) VALUES(" +"'"+ Name + "'" + "," + "'" + strSex + "'" + "," + "'" + strMsg + "'" + ")";


        OleDbCommand AccessCommand = conn.CreateCommand();
        AccessCommand.CommandText = insertString;


        AccessCommand.ExecuteNonQuery();
        conn.Close();