GridView中向数据库中添加数据的按钮代码

 int index = Convert.ToInt32(e.CommandArgument);
        string number = GridView1.Rows[index].Cells[0].Text;
        string name = GridView1.Rows[index].Cells[1].Text;
        string author = GridView1.Rows[index].Cells[2].Text;
        string press = GridView1.Rows[index].Cells[3].Text;
        string explain = GridView1.Rows[index].Cells[4].Text;
        string price = GridView1.Rows[index].Cells[5].Text;
        string state = Convert.ToString(Session["name"]);
        string str = ConfigurationManager.ConnectionStrings["sqlcnn"].ConnectionString;
        if (Session["name"] == null)
        {
            MsgBox("尚未登录，请先去登录");
        }
        else
        {
            using (SqlConnection cnn = new SqlConnection(str))
            {
                SqlCommand cmm = cnn.CreateCommand();
                cmm.CommandText = "insert into MyOrder (number,name,author,press,explain,price,state) values (@num,@name,@aut,@pre,@exp,@pri,@sta)";
                SqlParameter param = new SqlParameter("@num", number);
                cmm.Parameters.Add(param);
                param = new SqlParameter("@name", name);
                cmm.Parameters.Add(param);
                param = new SqlParameter("@aut", author);
                cmm.Parameters.Add(param);
                param = new SqlParameter("@pre", press);
                cmm.Parameters.Add(param);
                param = new SqlParameter("@exp", explain);
                cmm.Parameters.Add(param);
                param = new SqlParameter("@pri", price);
                cmm.Parameters.Add(param);
                param = new SqlParameter("@sta", state);
                cmm.Parameters.Add(param);
                cnn.Open();
                using (SqlCommand cmd = cnn.CreateCommand())
                {
                    //验证图书是否已经订阅过
                    cmd.CommandText = "select count(*) from MyOrder where name='" + name + "' and state='" + state + "'";
                    int i = Convert.ToInt32(cmd.ExecuteScalar());
                    if (i != 0)
                    {
                        MsgBox("该书已经订阅，不能重复订阅！");
                    }
                    else
                    {
                        cmm.ExecuteNonQuery();
                        cnn.Close();
                        cnn.Dispose();
                        MsgBox("订阅成功！");
                    }
                }
            }