OracleConnection oc=new OracleConnection("data source=osserver;User Id=****;password=**");
OracleCommand cmd=new OracleCommand("insert into cym.uploadfile (filename,filecontent) values (:filename,:filecontent)",oc);
OracleParameter op=new OracleParameter("filename",OracleType.VarChar,6);
OracleParameter op=new OracleParameter("filecontent",OracleType.Blob,filedata.Length);
op.Value=System.IO.Path.GetFileName(File.Value);
cmd.Parameters.Add(op);
op.Value=filedata;
cmd.Parameters.Add(op);
oc.Open();
cmd.ExecuteNonQuery();
oc.Close();

在ORACLE中，SQL语句参数是：+参数名，
insert into cym.uploadfile (filename,filecontent) values (:filename,:filecontent)
在定义此参数的参数变量里面参数名不用写：
OracleParameter op=new OracleParameter("filename",OracleType.VarChar,6);


SqlConnection conn=new SqlConnection("data source=ccserver;user id=sa;password=****;initial catalog=cym");
SqlCommand cmd =new SqlCommand("insert into uploadfile (filename) values (@filename)",conn);
SqlParameter sp=new SqlParameter("@filename",SqlDbType.VarChar,6);
sp.Value=".jpg";
conn.Open();
cmd.ExecuteNonQuery();
conn.Close();
在SQLSERVER中，SQL语句参数是@+参数名，
insert into uploadfile (filename) values (@filename)
在定义此参数的参数变量里面参数要写@
SqlParameter sp=new SqlParameter("@filename",SqlDbType.VarChar,6);