Database

protected void Button1_Click(object sender, EventArgs e)
    {
            SqlConnection con = new SqlConnection();
            con.ConnectionString =  ConfigurationManager.ConnectionStrings["AdNetConnectionString"].ToString();

            Session["CampaignName"]= TexBox1.Text.ToString();
            string sql;
            sql = "insert into AdCampaign (CampaignName)values( ' " + Session["CampaignName"] + " ');
            SqlCommand cmd = new SqlCommand(sql, con);
            con.Open();
            cmd.ExecuteNonQuery();
            con.Close();
    }

sql = "insert into AdCampaign (CampaignName) values(@myParameter)";
SqlCommand cmd = new SqlCommand(sql, con);
cmd.Parameters.AddWithValue("myParameter", Session["CampaignName"]);

sql_Store_Sessions = "insert into AdCampaign (AccountID,AdType,SiteCategory,Language,Gender,Age,Keyword,MaxBudget,DailyBudget,CampaignName,AdHeadline,AdText,DisplayUrl,TargetUrl,BannerImg,ImgName,Date,Status)values(" + Session["SelectIdFromTableAccount"] + ",'" + Session["adType"] + "','" + Session["Category"] + "','" + Session["Language"] + "','" + Session["Gender"] + "','" + Session["Age"] + "',@AdvKeyword," + Session["MaxBudget"] + "," + Session["Daily_Budget"] + ",@CampaignName,@AdHeadLine,@AdText,@DisplayUrl,@DestinationUrl,@Banner_Img,@Img_Name,'" + DateTime.Now + "','Paused')";
           SqlCommand cmd_Store_Sessions = new SqlCommand(sql_Store_Sessions, con);
           cmd_Store_Sessions.Parameters.AddWithValue("CampaignName", Session["CampaignName"]);
           cmd_Store_Sessions.Parameters.AddWithValue("AdHeadLine", Session["AdHeadLine"]);
           cmd_Store_Sessions.Parameters.AddWithValue("AdText", Session["AdText"]);
           cmd_Store_Sessions.Parameters.AddWithValue("DisplayUrl", Session["DisplayUrl"]);
           cmd_Store_Sessions.Parameters.AddWithValue("DestinationUrl", Session["DestinationUrl"]);
           cmd_Store_Sessions.Parameters.AddWithValue("Banner_Img", Session["Banner_Img"]);
           cmd_Store_Sessions.Parameters.AddWithValue("Img_Name", Session["Img_Name"]);

           con.Open();
           cmd_Store_Sessions.ExecuteNonQuery();
           con.Close();