video Upload and view in asp.net c#

create table videos(video_name varchar(200),videosong_loc varchar(500))
create procedure video_upload
@video_name varchar(200),
@video_loc varchar(500)
as
insert into videos values(@video_name,@video_loc)
select * from videos
create procedure Show_video
as
select * from videos
select * from mp3songs

<table class="style1">
            <tr>
                <td colspan="2">
                    <asp:FileUpload ID="FileUpload1" runat="server" />
                </td>
            </tr>
            <tr>
                <td class="style2">
                    <asp:Label ID="Label1" runat="server" Text="Video song name"></asp:Label>
                </td>
                <td>
                    <asp:TextBox ID="txtvideoname" runat="server"></asp:TextBox>
                </td>
            </tr>
            <tr>
                <td class="style2">
                    &nbsp;</td>
                <td>

                </td>
            </tr>
            <tr>
                <td class="style2">
                    &nbsp;</td>
                <td>
                 <asp:Button ID="btnInvoke" runat="server" onclick="btnInvoke_Click" Text="Upload" />
                </td>
            </tr>
            <tr>
                <td class="style2">
                    &nbsp;</td>
                <td>
                    <asp:Label ID="Label2" runat="server"></asp:Label>
                </td>
            </tr>
        </table>

    prote
cted void btnInvoke_Click(object sender, EventArgs e)

    {
        
        string name = FileUpload1.PostedFile.FileName;
        string ext = System.IO.Path.GetExtension(this.FileUpload1.PostedFile.FileName);
        if (FileUpload1.PostedFile.ContentLength == 0)
        {

            Label1.Text = "Cannot upload zero length file";
        }






        if (ext == ".wmv"||ext==".flv")
        {
            DateTime dt = DateTime.Now;
            string tme = dt.ToLongTimeString();
            string[] t = tme.Split(':');

            string y = "";
            foreach (string x in t)
            {
                y += x;
            }

            string aa = y + "_" + name;
            string location = Server.MapPath(" ") + "\\videos\\" + aa;
            FileUpload1.PostedFile.SaveAs(location);
            string loc = aa;
            //Session["location1"] = loc;
            SqlConnection sqlconn = new SqlConnection("server=.\\sqlexpress;database=db;integrated security=true;");
            SqlCommand sqlcomm = new SqlCommand("video_upload", sqlconn);
            sqlcomm.CommandType = CommandType.StoredProcedure;
            sqlcomm.Parameters.Add("@video_name", SqlDbType.VarChar, 200).Value = txtvideoname.Text;
            sqlcomm.Parameters.Add("@video_loc", SqlDbType.VarChar, 500).Value = loc;
            sqlconn.Open();
            sqlcomm.ExecuteNonQuery();
            sqlconn.Close();

            Label2.Text = "Video Song uploaded Successfully";
        }
        else
        {
            Label2.Text = "please choose .wmv file";
        }
    }

<asp:gridview id="GridView1" runat="server" autogeneratecolumns="False" xmlns:asp="#unknown">
        CellPadding="20" ForeColor="#333333" GridLines="None">
        <rowstyle backcolor="#F7F6F3" forecolor="#333333" />
    <columns>
    <asp:boundfield datafield="video_name" headertext="Video Name" />
    <asp:templatefield headertext="Play Video">
    <itemtemplate>
    <a href="playvideo.aspx?id=<%# Eval(" videosong_loc=") %>">Play Video</a>
    
    </itemtemplate>
    
    </asp:templatefield>
    
    </columns>
        <footerstyle backcolor="#5D7B9D" font-bold="True" forecolor="White" />
        <pagerstyle backcolor="#284775" forecolor="White" horizontalalign="Center">
            Width="500px" />
        <selectedrowstyle backcolor="#E2DED6" font-bold="True" forecolor="#333333" />
        <headerstyle backcolor="#5D7B9D" font-bold="True" forecolor="White" />
        <editrowstyle backcolor="#999999" />
        <alternatingrowstyle backcolor="White" forecolor="#284775" />
    </pagerstyle></asp:gridview>

SqlConnection sqlconn = new SqlConnection("server=.\\sqlexpress;database=db;Integrated Security=True");
            SqlCommand sqlcomm = new SqlCommand("Show_video", sqlconn);
sqlcomm.CommandType = CommandType.StoredProcedure;
            sqlconn.Open();
            SqlDataReader dr = sqlcomm.ExecuteReader();
            if (dr.HasRows)
            {
                GridView1.DataSource = dr;
                GridView1.DataBind();
                sqlconn.Close();
                dr.Close();
            }

<asp:label id="Label1" runat="server" text="Label"></asp:label>

string play = Request.QueryString["id"];
            string strSQL = "select * from videos where videosong_loc='" + play + "'";
            SqlConnection sconn = new SqlConnection(@"Data Source=.\sqlexpress;Initial Catalog=db;Integrated Security=True");

            SqlCommand scomm = new SqlCommand(strSQL, sconn);
            sconn.Open();
            SqlDataReader sreader = scomm.ExecuteReader();
            if (sreader.Read())
            {

                string Str = "videos\\" + sreader[1].ToString();
                string text = "<embed src="" + Str + "" height="300" width="500"><noembed>Sorry, your browser doesn't support the embedding of multimedia.</noembed></embed>";
                //Response.Write(text);
                Label1.Text = text;
                sreader.Close();
                sconn.Close();