asp.net上传图片用数据库保存图片

asp.net实现上传图片后使用数据库保存图片的代码。
代码：

HttpPostedFile UpFile = File1.PostedFile;
int FileLenght = UpFile.ContentLength;
decimal FileSize = FileLenght / 1024;
if (FileLenght == 0)
{
    DIVShowGVError.Visible = true;
    LblShowGVError.Text = "请选择上传文件";
    return;
}
string strImageName = UpFile.FileName;
string strImageType = strImageName.Substring(strImageName.LastIndexOf(".")).ToLower();
if (strImageType != ".jpg" && strImageType != ".jpeg" && strImageType != ".bmp" && strImageType != ".png")
{
    DIVShowGVError.Visible = true;
    LblShowGVError.Text = "請上傳以下文件格式的圖片：jpg,jpeg,bmp,png";
    return;
}
if (FileSize > 2048)
{
    DIVShowGVError.Visible = true;
    LblShowGVError.Text = "上傳圖片不能大於2M";
    return;
}
else
{
    Byte[] FileByteArray = new Byte[FileLenght];
    Stream StreamObject = UpFile.InputStream;
    StreamObject.Read(FileByteArray, 0, FileLenght);
    strNewLeave = "insert into [Leave]([ID],[EmployeeNo],[AgentID],[LeaveType],[StartDate],[EndDate],[Hours],[LeaveReason],[ReportTime],[ReportID],[ImageName],[ImageData]) ";
//脚本学堂 www.jbxue.com
    strNewLeave += "values(@LeaveNo,@EmpNo,@AgentName,@LeaType,@StartDate,@EndDate,@Hours,@Reason,getdate(),@Admin,@ImageName,@Image) ";
    sqlPara = new SqlParameter[] { 
    new SqlParameter("@LeaveNo",strLeaNo),
    new SqlParameter("@EmpNo",strEmpNo),
    new SqlParameter("@AgentName",strAgentID),
    new SqlParameter("@LeaType",strLeaType),
    new SqlParameter("@StartDate",strDateSt),
    new SqlParameter("@EndDate",strDateEnd),
    new SqlParameter("@Hours",strHours),
    new SqlParameter("@Reason",strReason),
    new SqlParameter("@Admin",strAdmin),
    new SqlParameter("@ImageName",strImageName),
    new SqlParameter("@Image",FileByteArray)
    };
    StreamObject.Close();
}

数据库访问代码：

SQLHelper sqlH = new SQLHelper();
        string strID = context.Request["ID"];
        byte[] MyData = new byte[0];
        string str = "  select [ImageData] from [Leave] where [ID]='" + strID + "' ";
        DataTable dt = sqlH.ExecuteQuery(str, CommandType.Text);
        if (dt.Rows.Count > 0)
        {
MyData = (byte[])dt.Rows[0][0];
int ArraySize = MyData.GetUpperBound(0);
context.Response.OutputStream.Write(MyData, 0, ArraySize);
        }