Saves picture to database

using System;using System.Collections.Generic;using System.ComponentModel;using System.Data;using System.Drawing;using System.Linq;using System.Text;using System.Windows.Forms;using System.Data.SqlClient;using System.IO;namespace WindowsFormsApplication1{    public partial class Form1 : Form    {        SqlCommand sqlCommand1 = null;        SqlConnection sqlConnection1 = new SqlConnection(@"data source=LZC-FUJITSU;uid=sa;pwd=sa;database=Test");        public Form1()        {            InitializeComponent();        }        /// <summary>        /// Saves picture to database.        /// </summary>        /// <param name="sender"></param>        /// <param name="e"></param>        private void btnSave_Click(object sender, EventArgs e)        {            string pathName;            if (this.openFileDialog1.ShowDialog() == System.Windows.Forms.DialogResult.OK)            {                pathName = this.openFileDialog1.FileName;                Image img = Image.FromFile(pathName);                this.pictureBox1.Image = img;                //将图像读入到字节数组                FileStream fs = new FileStream(pathName, FileMode.Open, FileAccess.Read);                byte[] buffByte = new byte[fs.Length];                fs.Read(buffByte, 0, (int)fs.Length);                fs.Close();                fs = null;                //建立Command命令                string comm = @"Insert into table1(img,name) values(@img,@name)";                this.sqlCommand1 = new System.Data.SqlClient.SqlCommand();                this.sqlCommand1.CommandType = System.Data.CommandType.Text;                this.sqlCommand1.CommandText = comm;                this.sqlCommand1.Connection = this.sqlConnection1;                //创建Parameter                this.sqlCommand1.Parameters.Add("@img", System.Data.SqlDbType.Image);                this.sqlCommand1.Parameters[0].Value = buffByte;                this.sqlCommand1.Parameters.Add("@name", System.Data.SqlDbType.VarChar);                this.sqlCommand1.Parameters[1].Value = pathName.Substring(pathName.LastIndexOf("\\") + 1);                try                {                    this.sqlConnection1.Open();                    this.sqlCommand1.ExecuteNonQuery();                    this.sqlConnection1.Close();                }                catch (System.Exception ee)                {                    MessageBox.Show(ee.Message);                }                buffByte = null;            }        }        /// <summary>        /// Reads picture from database.        /// </summary>        /// <param name="sender"></param>        /// <param name="e"></param>        private void btnOpen_Click(object sender, EventArgs e)        {            SqlConnection conn = new SqlConnection(@"data source=LZC-FUJITSU;uid=sa;pwd=sa;database=Test");            conn.Open();            SqlCommand cmd = new SqlCommand("select img from table1 where password='2'", conn);            SqlDataReader reader = cmd.ExecuteReader();            if (reader.Read())            {                MemoryStream buf = new MemoryStream((byte[])reader[0]);                Image image = Image.FromStream(buf, true);                pictureBox1.Image = image;            }            conn.Close();        }    }}