ASP.NET

namespace photoshops
{
    public partial class WebForm1 : System.Web.UI.Page
    {
        protected void Page_Load(object sender, EventArgs e)
        {

        }

        protected void Button1_Click(object sender, EventArgs e)
         {
             onflbload(sender, e);
         }
        public void onflbload(object sender, EventArgs e)
        {
        // Create a byte[] from the input file

        int len = flbload.PostedFile.ContentLength;
        byte[] pic = new byte[len];
        flbload.PostedFile.InputStream.Read(pic, 0, len);
        
        // Insert the image and comment into the database

        SqlConnection connection = new SqlConnection(@"Data Source=DEVI\SQLEXPRESS; 
                          Initial Catalog =cat; Integrated Security=SSPI");
        SqlConnection con = new SqlConnection();
        con.ConnectionString = @"Data Source=DEVI\SQLEXPRESS; Initial Catalog =cat; Integrated Security=SSPI";

        try
        {
            connection.Open();
            SqlCommand cmd = new SqlCommand("insert into tblphotosettings " + "(BillNo,CustomerName,Address,StartDate,EndDate,Numberofcopies,) values (@BillNo,@CustomerName,@Address,@StartDate,@EndDate,@Numberofcopies,)", connection);
            cmd.Parameters.Add("@BillNo", SqlDbType.NVarChar).Value = TextBox1.Text;
            cmd.Parameters.Add("@CustomerName", SqlDbType.NVarChar).Value =TextBox2.Text;
            cmd.Parameters.Add("@Address", SqlDbType.NVarChar).Value = TextBox3.Text;
            cmd.Parameters.Add("@StartDate", SqlDbType.NVarChar).Value =Rdbsdate.SelectedDate;
            cmd.Parameters.Add("@EndDate", SqlDbType.NVarChar).Value =Rdbddate.SelectedDate;
            
            cmd.Parameters.Add("@Numberofcopies", SqlDbType.NVarChar).Value =TextBox7.Text;
            
            

            cmd.CommandText = "photosets";
            cmd.CommandType = CommandType.StoredProcedure;
            cmd.Connection = con;
            cmd.Parameters.Add("@Systemurl", SqlDbType.Image).Value = pic;
            SqlParameter Src = new SqlParameter("@FilePath", SqlDbType.VarChar, 450);
            cmd.Parameters.Add("@Amount", SqlDbType.NVarChar).Value = TextBox8.Text;
            cmd.Parameters.Add("@Total", SqlDbType.NVarChar).Value = TextBox9.Text;
           
            cmd.Parameters.Add(Src);
            con.Open();
            cmd.ExecuteNonQuery();

        }

        finally
        {
            connection.Close();
        }
    }
}
}    

set ANSI_NULLS ON
set QUOTED_IDENTIFIER ON
GO

ALTER PROCEDURE [dbo].[photosets]
(
@Systemurl image,
@Filepath varchar,
@Amount NVarchar,
@Total NVarchar
)
	
AS
BEGIN
	insert into tblphotosettings
(

Systemurl,
Filepath,
Amount,
Total
)
	values
(
@Systemurl,
@Filepath,
@Amount,
@Total
)
END

Page.RegisterStartupScript("CLOSE", "<script language='javascript'>window.opener.document.forms(0).submit();self.close();</script>");

ClientScript.RegisterStartupScript(typeof(Page), "closePage", "window.onunload = CloseWindow();");
Page.RegisterStartupScript("CLOSE", "<script language='javascript'>window.opener.location.reload();self.close();</script>");
Page.RegisterStartupScript("CLOSE", "<script language='javascript'>window.opener.location.href = window.opener.location.href;self.close();</script>");
Page.RegisterStartupScript("CLOSE", "<script language='javascript'>window.opener.history.go(0) = window.opener.location.href;self.close()</script>");

<asp:DropDownList ID="DropDownList_HP" runat="server"
    AppendDataBoundItems="True" DataSourceID="SqlDataSource_RefHosp" 
    DataTextField="HospName" DataValueField="HospID" SelectedValue='<%# Bind("HospID") %>' Enabled="True">
    <asp:ListItem Selected="True" Value="">- select -</asp:ListItem>
</asp:DropDownList>                            

<asp:RequiredFieldValidator ID="RequiredFieldValidatorDV4" runat="server" 
    ControlToValidate="DropDownList_HP" 
    ErrorMessage="Select a referring hospital" 
    InitialValue="- select -" ValidationGroup="PatientInputGroupDV4"
SetFocusOnError="True"></asp:RequiredFieldValidator>                            

<connectionStrings>
				<add name="dbconnection" connectionString="Data Source=SQLOLEDB.1;Data Source=.;Initial Catalog=DatabaseB;User ID=test;Password=test123"/>

				<remove name="LocalSqlServer"/>
		<add name="LocalSqlServer" connectionString="Data Source=SQLOLEDB.1;Data Source=.;Initial Catalog=DatabaseB;User ID=test;Password=test123"/>
	</connectionStrings>
	<system.web>
		<roleManager enabled="true">
			<providers>
				<add name="SqlRoleManager"
					 type="System.Web.Security.SqlRoleProvider"
					 connectionStringName="LocalSqlServer"
					 applicationName="/SiteB" />
			</providers>
		</roleManager>

	<connectionStrings>