Data insert process to SQL Server Database through web page which design with ASP.Net

string InsertQuery = "insert into [tablename](column1,column2) values (@param1,@param2)";
        try
        {
            SqlConObject.Open();
            SqlCommand cmd = new SqlCommand(InsertQuery, SqlConObject);
            cmd.Parameters.AddWithValue("@param1", TextName.Text.Trim());
            cmd.Parameters.AddWithValue("@param2", TextEmail.Text.Trim());
            cmd.CommandType = CommandType.Text;
            cmd.ExecuteNonQuery();
        }
        finally
        {
            SqlConObject.Close();
        }