Yes.
It won't do anything useful, in fact SQL will probably complain if you try to use it because you haven't provided any values - but as string concatenation, it's fine. Provided of course you have a table called "user1" - and I hope you haven't! :laugh:
The basic code you are looking for is:
Using con As New SqlConnection(strConnect)
con.Open()
Using com As New SqlCommand("INSERT INTO myTable (myColumn1, myColumn2) VALUES (@C1, @C2)", con)
com.Parameters.AddWithValue("@C1", myValueForColumn1)
com.Parameters.AddWithValue("@C2", myValueForColumn2)
com.ExecuteNonQuery()
End Using
End Using