UserAdd.aspx.cs

using System;
using System.Collections.Generic;
using System.Data.SqlClient;
using System.Linq;
using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;

public partial class Admin_Add : System.Web.UI.Page
{
    SqlConnection con;
    SqlCommand cmd;
    
    protected void Page_Load(object sender, EventArgs e)
    {
//Add Connection String
        con = new SqlConnection("");
                con.Open();
    }
    protected void Button1_Click(object sender, EventArgs e)
    {
        if (FileUpload1.HasFile)
        {
            String fileExt, fileName;
            fileExt = System.IO.Path.GetExtension(FileUpload1.FileName);
            if (fileExt == ".jpg" || fileExt == ".png" )
            {
                try
                {
                    //folder path to store images
                    FileUpload1.SaveAs("" + FileUpload1.FileName);
                    fileName = "Images/" + FileUpload1.FileName;
                    string str = "INSERT INTO [dbo].[pictures] ([name], [desc], [credit], [downloaded], [img], [cat]) VALUES ('" + Name.Text + "','" + Det.Text + "','" +  Session["email"] + "',0,'" + fileName + "','" + DropDownList2.SelectedItem.Value + "')" ;
                    cmd = new SqlCommand(str, con);
                    cmd.ExecuteNonQuery();
                    con.Close();
                    Name.Text = "";
                    Det.Text = "";
                    Noti.Text = "Picture Added";
                }
                catch(Exception ex)
                {
                    Noti.Text = "" + ex.Message.ToString();
                }
            }
        }
    }
}