title: ASP.NET parameters calling in SQL command (code behind)
body: <p>how to call an asp parameter in a sql command
  exp: </p>
  
  <pre><code>cmd.CommandText = "SELECT name FROM server WHERE code="+TextBox1.Text;
  </code></pre>
  
  <p>is it correct? .</p>