<asp:SqlDataSource ID="SqlDataSource1" runat="server" ConnectionString="<%$ ConnectionStrings:ConnectionString %>"
UpdateCommand="Update Products SET name=@name,category=@category WHERE product_id=@product_id"
InsertCommand="INSERT INTO Products(name,category,product_id) VALUES (@name,@category,@product_id)"
DeleteCommand="DELETE FROM [Products] WHERE product_id=@product_id;" SelectCommand="SELECT * FROM [Products]">
<InsertParameters>
<asp:Parameter Name="name" />
<asp:Parameter Name="category" />
<asp:Parameter Name="product_id" />
</InsertParameters>
</asp:SqlDataSource>