內容添加asp.net

private void Button1_Click(object sender, System.EventArgs e)
        {
            if(this.IsValid){
            OleDbConnection conn=dbconn.createconn();
                conn.Open();
                OleDbCommand cmd=new OleDbCommand();
                cmd.CommandText="insert into a(title,content)values('"+this.title.Text.Trim().Replace("'","")+"','"+this.content.Text.Trim().Replace("'","")+"')";
                cmd.Connection=conn;
                try
                {
                    cmd.ExecuteNonQuery();
                    this.title.Text="";
                    this.content.Text="";
                    this.add_info.Text="提交成功";
                }
                catch
                {
                    this.add_info.Text="出現錯誤";

                                    }
                finally{
                conn.Close();
                }
            }
        }