ASP.Net: Uploading a file to a database on a server

try
{ // Read the file and convert it to Byte Array
string filePath = FileUpload1.PostedFile.FileName;
string filename = Path.GetFileName(filePath);
string ext = Path.GetExtension(filename);
string contenttype = String.Empty;
//Set the contenttype based on File Extension
switch (ext)
{
case ".doc":
contenttype = "application/vnd.ms-word";
break;
case ".docx":
contenttype = "application/vnd.ms-word";
break;
}
if (contenttype != String.Empty)
{ Stream fs = FileUpload1.PostedFile.InputStream;
BinaryReader br = new BinaryReader(fs);
Byte[] bytes = br.ReadBytes((Int32)fs.Length);
//insert the file into database
string strQuery = "insert into careers(cv,extcv,namecv) values (@cv,@extcv,@namecv)";
SqlCommand cmd = new SqlCommand(strQuery);
// NAME OF THE CV
cmd.Parameters.Add("@namecv", SqlDbType.NVarChar).Value = filename;
//EXTENTION OF THE CV DOCUMENT
cmd.Parameters.Add("@extcv", SqlDbType.NVarChar).Value = contenttype;
//CV DATA BINARY
cmd.Parameters.Add("@cv", SqlDbType.Binary).Value = bytes;
//function bolean
InsertUpdateData(cmd);
//RESPONSE TO ANOTHER PAGE
Response.Redirect("done.aspx");
}
else
{ lblMessage.ForeColor = System.Drawing.Color.Red;
lblMessage.Text = "File format not recognised. Upload Image/Word/PDF/Excel formats";
}

}

catch (Exception exr)
{Response.Write(exr.Message);
}


}
// THE FUUNCTION IN FOR INSERT THE FILE DB
private Boolean InsertUpdateData(SqlCommand cmd)
{
String strConnString = System.Configuration.ConfigurationManager.ConnectionStrings["dballharam"].ConnectionString;
SqlConnection con = new SqlConnection(strConnString);
//COMMAND TEXT IN BUTTOM CLICK
cmd.CommandType = CommandType.Text;
cmd.Connection = con;
try
{
con.Open();
cmd.ExecuteNonQuery();
return true;
}
catch (Exception ex)
{
Response.Write(ex.Message);
return false;
}
finally
{
con.Close();
con.Dispose();
}
}