Query with parameters

public void method(){
String ConnectionString = System.Web.Configuration.WebConfigurationManager.
ConnectionStrings["DB_CONN"].ConnectionString;
//connection
OleDbConnection con = new OleDbConnection(ConnectionString);
con.Open();

String query = “INSERT INTO EXAMPLE(ID_TIP, ID_COM) ” +
” VALUES(@ID_TIP, @ID_COM)”;
OleDbCommand cmd = new OleDbCommand(query, con);

cmd.Parameters.Add(MyOleDbParameter.create(“@ID_TIP”, DbType.Int32,DropDownListTip.SelectedValue,null));
cmd.Parameters.Add(MyOleDbParameter.create(“@ID_COM”, DbType.Int32,DropDownListComm.SelectedValue));

cmd.ExecuteNonQuery();
con.Close();

Response.Redirect(“VisualizzaProgetti.aspx”);
}

//Help Class in App_Code

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Data.OleDb;
using System.Data;

public class MyOleDbParameter
{
public MyOleDbParameter()
{

}
public static OleDbParameter create(String name, DbType type, Object value)
{
OleDbParameter par = new OleDbParameter(name, type);
par.Value = value;
return par;
}
public static OleDbParameter create(String name, DbType type, Object value, Object valueNull)
{
OleDbParameter par = new OleDbParameter(name, type);
par.Value = value;
if (value == null || ((String)value).Length == 0)
par.Value = DBNull.Value;
return par;
}
}

//web.config

<appSettings/>
<connectionStrings>
<add name=”DB_CONN” connectionString=”Provider=Microsoft.Jet.OLEDB.4.0;Data Source=&quot;|DataDirectory|\MyDB.mdb&quot;”
providerName=”System.Data.OleDb” />