Using Declared Variables In SQL INSERT Statement.

 

I am new to scripting in general and I've run into an issue when attempting to write a VB variable to a database table in SQL Express.  I am trying to record the value of the variable to the db, but it does not appear that the value is being passed to SQL.  If I hard code the values in the SQL statement it works fine.  Can someone explain what I'm doing wrong accomplish this?  My code is below.  Thanks in advance. 

file.aspx

<asp:SqlDataSource ID="SqlDataSource" runat="server"

ConnectionString="<%$ ConnectionStrings:SqlConnectionString %>"

SelectCommand="SELECT * FROM [Table]"

InsertCommand="INSERT INTO [Table] (field1, field2) VALUES (& variable1 &, & variable2 &);" >

</asp:SqlDataSource>

file.aspx.vb

Protected Sub Button_Click(ByVal sender As Object, ByVal e As System.EventArgs) Handles Button.Click

Dim variable1 As String = FileUpload.FileName

Dim variable2 As String = Date.Now

Dim path As String = Server.MapPath("~/directory/)

If FileUpload.HasFile = True Then

Try

SqlDataSource.Insert()

FileUpload.PostedFile.SaveAs(path & _

FileUpload.FileName)

End Try

 

End If

 

End Sub