C#

String MyString = @"INSERT INTO UserData (Name, telnetaddr) VALUES('" + addr.name.ToString().Trim() + "', '" + addr.telnetaddr.ToString().Trim() + "')";

//command.Parameters.Add("@ID", SqlDbType.Int);
//command.Parameters["@ID"].Value = ID;
command.Parameters.Add("@Name", SqlDbType.Text);
command.Parameters["@Name"].Value = addr.name;
command.Parameters.Add("@telnetaddr", SqlDbType.Text);
command.Parameters["@telnetaddr"].Value = addr.telnetaddr;

// Use AddWithValue to assign Demographics.
// SQL Server will implicitly convert strings into XML.
command.Parameters.AddWithValue(commandText, );

MyCmd.ExecuteNonQuery();
Int32 rowsAffected = MyCmd.ExecuteNonQuery();

class Program
{
    static void Main(string[] args)
    {
        add();
    }

    public static void add()
    {
        Console.Clear();

        Person addr = new Person();

        Console.Write("Enter Name : ");
        addr.name = Console.ReadLine();


        Console.Write("Address : ");
        addr.telnetaddr = Console.ReadLine();

        Console.Clear();

        Console.WriteLine("BBS Name : " + addr.name);
        Console.WriteLine("Telnet Address : " + addr.telnetaddr);
        Console.WriteLine();

        Console.Write("Is this what you want Y/N");
        string Q = Console.ReadLine();
        Q = Q.ToUpper();
        //savelog("User has just added an entry");
        if (Q == "Y")
        {
            string UserConnection = Properties.Settings.Default.ConsoleUsersTestConnectionString;
            SqlConnection MyConnection = new SqlConnection(UserConnection);

            String MyString = @"INSERT INTO UserData (Name, telnetaddr) VALUES('" + addr.name + "', '" + addr.telnetaddr + "')";
            SqlCommand MyCmd = new SqlCommand(MyString, MyConnection);

            MyConnection.Open();
            try
            {
                MyCmd.ExecuteNonQuery();
                Int32 rowsAffected = MyCmd.ExecuteNonQuery();
                Console.WriteLine("RowsAffected: " + rowsAffected);
                MyConnection.Close();
            }
            catch (SqlException ex)
            {
                Console.WriteLine(ex.Message);
            }


        }
        else
        {
            Console.WriteLine("Save Aborted");

        }

        Console.WriteLine("Press Enter to Continue");
        Console.WriteLine();

    }
}

SELECT * FROM dbo.UaersData WHERE Name = @userName

string commandString = "SELECT * FROM dbo.UaersData WHERE Name = '" + theVariableHoldingTheNameFromTheConsole + "'";

ds = new DataSet("tb");

clsConnect.SqlDa = new SqlDataAdapter("SELECT * FROM tb1 WHERE ID = 2", clsConnect.SqlCon);

clsConnect.SqlCmdBuild = new SqlCommandBuilder(clsConnect.SqlDa);

clsConnect.SqlDa.InsertCommand = clsConnect.SqlCmdBuild.GetInsertCommand();
clsConnect.SqlDa.DeleteCommand = clsConnect.SqlCmdBuild.GetDeleteCommand();
clsConnect.SqlDa.UpdateCommand = clsConnect.SqlCmdBuild.GetUpdateCommand();

clsConnect.SqlDa.Fill(ds , "tb");
dataGridView1.DataSource = ds.Tables[0];
clsConnect.SqlDa.Update(ds.Tables[0]);
ds.Tables[0].AcceptChanges();

dataset.Tables[0].WriteXml(....);

DataSet ds = new DataSet();
SqlDataAdapter Sqlda = new ("SELECT * FROM table" , SqlConnection);
Sqlda.Fill (ds);

ds.Tables[0].WriteXml(...);