<%@ Page Language="C#" %>

<%@ Import Namespace="System.Data.SqlClient" %>

<%
    SqlConnection connection = new SqlConnection(@"Data Source=.\SQLEXPRESS;AttachDbFilename=C:\Documents and Settings\Owner\My Documents\Visual Studio 2008\WebSites\WebSite1\App_Data\Database.mdf;Integrated Security=True;User Instance=True");
    connection.Open();

    String name = Request.Params["name"];

    if (name == null) {
        name = "steve";
    }

    SqlCommand command = new SqlCommand("INSERT INTO test (name) VALUES ('" + name + "')", connection);
    command.ExecuteNonQuery();

    command = new SqlCommand("SELECT * FROM test", connection);
    SqlDataReader reader = command.ExecuteReader();

    while (reader.Read()) {
        Response.Write("<p>" + reader["name"] + "</p>");
    }

    reader.Close();
    connection.Close();
%>