string sql = "INSERT INTO SOLUTIONS(name,path) VALUES(@param2,@param3)";
using(SqlCommand cmd = new SqlCommand(sql, connection))
{
cmd.Parameters.Add("@param2", SqlDbType.NVarChar).Value = "dva";
cmd.Parameters.Add("@param3", SqlDbType.NVarChar).Value = "testinggg";
cmd.CommandType = CommandType.Text;
cmd.ExecuteNonQuery();
}