public static void addnews(newsclass news1)
    {
      using (SQLConnection cn = dbconn.GetConnection())
      {
        cn.OPEn();
        SqlCommand cm = new SqlCommand();
        cm.Connection = cn;
        string sql = "insert news(tITle,contents,img,annex,time) values(@aa,@bb,@cc,@dd,@ee)";
        cm.COMmandText = sql;
        cm.Parameters.AddWithValue("@aa", news1.Title);
        cm.Parameters.AddWithValue("@bb", news1.Contents);
        cm.Parameters.AddWithValue("@cc", news1.Img);
        cm.Parameters.AddWithValue("@dd", news1.Annex);
        cm.Parameters.AddWithValue("@ee", news1.Time);
        cm.ExecuteNonQuery();
      }
    }

PRotected void Button1_Click(object sender, Eventargs e)
  {
    newsclass news1 = null;
    news1 = new newsclass();
    news1.Title = TextBox1.Text.ToString().Trim();
    news1.Contents= TextBox2.Text.ToString().Trim();
    news1.Img = FileUpload1.FileName.ToString();
    news1.Annex= FileUpload2.FileName.ToString();
    news1.Time = DateTime.Now.ToString();
    newschuli.addnews(news1);
        Response.redirect("NewsCategoriESManager.aspx");
 }

if (FileUpload1.HasFile)
 {
      FileUpload1.SaveAs(Server.MapPath("../upfile" + "\\" + DateTime.Now.ToString("yyyyMMddHHmmss") + FileUpload1.FileName));
  }
 if (FileUpload2.HasFile)
 {
  FileUpload2.SaveAs(Server.MapPath("../upfile" + "\\" +DateTime.Now.ToString("yyyyMMddHHmmss") + FileUpload2.FileName));
 }