public String insertPatientImage(String hn, String hnyear, byte[] image) { String sql = "", re = ""; try { string str = Encoding.Default.GetString(image); new LogWriter("d", "insertPatientImage hn " + hn + " hnyear " + hnyear); sql = "delete from patient_img where mnc_hn_no = '" + hn + "' and mnc_hn_yr = '" + hnyear + "' "; conn.ExecuteNonQuery(conn.connMainHIS, sql); sql = "insert into patient_img (mnc_hn_no, mnc_hn_yr, mnc_pat_img) values(" + "'" + hn + "','" + hnyear + "',@photo" + ")"; re = conn.ExecuteNonQueryImage(conn.connMainHIS, sql, image); } catch (Exception ex) { re = ex.Message + " " + ex.InnerException; new LogWriter("e", "insert Patient sql " + sql + " ex " + re); } return(re); }