asp.net下降文本格式数据导入到数据库中的代码

StreamReader sr = new StreamReader("E:\\123.txt");//文件路径 
string oneLine; 
while ((oneLine = sr.ReadLine()) != null) 
{ 
string[] str = oneLine.Split('|'); 
string sql = "insert into TableDX(number,name,produce,xinghao) values('" + str[0].ToString() + "','" + str[1].ToString().Replace("'","'") + "','" + str[2].ToString() + "','" + str[3].ToString() + "')"; 
string strConn = "Data Source=.;Initial Catalog=master;User ID=sa;Password=sa";//连接字符串 
SqlConnection conn = new SqlConnection(strConn); 

int res = 0; 
conn.Open(); 
SqlCommand cmd = new SqlCommand(sql, conn); 
res = cmd.ExecuteNonQuery(); 
conn.Close(); 
} 
sr.Close(); 
this.Response.Write("<script>alert('导入成功');</script>");