c#上传文件

 public ActionResult Upload()
        {
            string LoginUser = Session["LoginUser"] != null ? Session["LoginUser"].ToString() : "";
            var a = Path.GetFileName(Request.Files["File"].FileName).IndexOf(".");
            string t = DateTime.Now.ToString("yyyy/MM/dd HH:mm:ss");
            string ext = Path.GetExtension(Request.Files["File"].FileName);
            RndatDC dc = new RndatDC(df.sqlTool.DB);
            var File = Path.GetFileName(Request.Files["File"].FileName).Substring(0, a);
            Request.Files["File"].SaveAs(Request.MapPath("~/upload/") + Request.Files["File"].FileName);
            int fileCount = Request.Files.Count; //上传数量
            double fileSize = Request.Files["File"].ContentLength; //文件大小（字节）
            string fileName = Request.Files["File"].FileName; //文件名
            string fileType = Request.Files["File"].ContentType;//文件类型
            string fileExt = System.IO.Path.GetExtension(fileName); //文件扩展后缀名
            string pathFile = df.docCfg.DocumentConfig.DocTemplate;
            SqlConnection conn = new SqlConnection(connectionString);
            conn.Open();
            //创建cmdtext变量，功能是将变量中的值得插入到数据库的字段中d
            string cmdtext = "INSERT INTO [RndSuite].[Operate] ([Fname], [CreateUser], [Creaton],[URL],[Type],[Dc])VALUES(N'" + File + "',N'',N'" + t + "',N'" + pathFile + "',N'" + ext + "',N'" + dc.DC + "')";
            try//捕获异常
            {
                //执行插入操作
                //创建sql命令对象
                SqlCommand cmd = new SqlCommand(cmdtext, conn);
                //执行更新，返回一个int类型值
                cmd.ExecuteNonQuery();
            }

            catch (System.Exception ee)
            {
                Response.Write(ee.ToString());

            }
            finally
            {
                conn.Close();

            }
            return Redirect("/Spec/OperationReport");
        }