Insert In SQL Server C# Code

When someone clicks my form


i use this code to enter data in Server:





private void Submit_Click(object sender, System.EventArgs e)


{


SqlConnection con = null;


SqlCommand cmd = null;


SqlDataReader rd = null;





try


{


con = new SqlConnection("server=localhost; uid=sa; pwd=123; database=TaskManagement");


cmd = new SqlCommand("INSERT INTO TASK_TYPE (name) VALUES ("+name.Text+")", con);





con.Open();


rd = cmd.ExecuteQuery();








}


catch (Exception e)


{


Response.Write("<p><font color="red">Error: ");


Response.Write(e.Message);


Response.Write("</font></p>");


}


finally


{


if(rd != null)


rd.Close();


if(con != null)


con.Close();


}


}








is that right? I am new in c# and i try to make it work!


Thanks in advance!