coding for nhibernate

SqlConnection con=new SqlConnection("Data Source=inndocs3;Initial Catalog=yvk;Persist Security Info=True;User ID=sa;Password=inndocs");
SqlCommand cmd=new SqlCommand();
cmd.Connection=con;
cmd.CommandText="insert into userinfo values('"+t1.Text+"','"+fileupload1.FileName+"')";
fileupload1.PostedFile.SaveAs(Server.MapPath(".") + "\\" + fileupload1.FileName);
con.Open();
cmd.ExecuteNonQuery();
con.Close();
t1.Text = "";
Response.Write("<H1> File saved</H1>");