sql insert+a text box value

Protected Sub btnSubmit_Click(ByVal sender As Object, ByVal e As System.EventArgs) Handles btnSubmit.Click Dim con As New SqlConnection con.ConnectionString = ConfigurationManager.ConnectionStrings("ANILConnectionString").ConnectionString con.Open() Dim sql_ins As String sql_ins = "insert into emp_data select regnumber,name,firm,appt,dtin,remark from anil_data where regnumber='" + notxt.Text + "'" Dim sqlcom As New SqlCommand(sql_ins, con) sqlcom.ExecuteNonQuery() Page.ClientScript.RegisterStartupScript(Me.GetType, "Forms", "<script> alert('Record Moved Successfully........')</script>") Dim qstr As String qstr = "update anil_DATA set firm=@a,appt=@b,indt=@c, regnumber=@regnumber where regnumber=@regnumber" Dim sql1 As New SqlCommand(qstr, con) sql1.Parameters.Add(New SqlParameter("@a", SqlDbType.VarChar, 50)).Value = firmtxt.Text sql1.Parameters.Add(New SqlParameter("@b", SqlDbType.VarChar, 25)).Value = appttxt.Text sql1.Parameters.Add ...