حفظ بيان من كذا تكست واحد فى كذا row

لسلام عليكم ورحمة الله وبركاتة انا عايز اعرف ازاى يتم حفظ بيانات من تكست بوكس التكست موجود فية اربع قيم من بينهم ; مثل ذلك hanykabeial;ahmed;essa

فتظهر رسالة خطا وهى The name "HANYKABEIL" is not permitted in this context. Valid expressions are constants, constant expressions, and (in some contexts) variables. Column names are not permitted.عند ةحفظ البينات وكود مكتوب كما يلى

try

}

catch (Exception ex)

{

}

TxtSearch.Text = DateTime.Now.ToString();

string connstring = ConfigurationManager.ConnectionStrings["MailSmc"].ToString();

SqlConnection conn = new SqlConnection(connstring);

string txtsql1;

TxtSearch.Text = DateTime.Now.ToShortDateString();

txtsql1 = "insert into Email(Customer_ID, Mail_From, Mail_From1, codAdmn, Date, Head, Forword, Body, Attament)";

المشكلةفى تلك السطر تظهر رسالة خطا مكتوبة فى اعلى txtsql1 += " VALUES('" + TextBox2.Text + "',";

txtsql1 += "" + TextBox1.Text + '\n' + ",";

txtsql1 += "'" + Label1.Text.ToString() + '\n' + "',";

txtsql1 += "" + TextBox3.Text + '\n' + ",";

//txtsql1 += "'" + txtdate.Text.ToString() + "',";

txtsql1 += "CONVERT(DATETIME, '" + DateTime.Now.ToShortDateString() + "', 102),";

txtsql1 += "'" + txtSujbet.Text + "',";

txtsql1 += "'" + false + "',";

txtsql1 += "'" + txtBody.Text + ",";

TxtSearch.Text = FileUpload1.FileName;

txtsql1 += @"' , 'Mailatt/" + TxtSearch.Text + "')";

SqlCommand cmd = new SqlCommand(txtsql1, conn);

conn.Open();

cmd.ExecuteNonQuery();

Response.Redirect("Mail.aspx");

Response.Write(txtsql1);

conn.Close();

}