Hi i come up with:
SqlConnection db = this.OpenDatabase();
SqlCommand cmd = new SqlCommand("INSERT INTO UserRoles (UserName, RoleName) VALUES (@UserId, @RoleId)", db);
cmd.Parameters.Add("@UserId", SqlDbType.Int);
cmd.Parameters.Add("@RoleId", SqlDbType.Int);
SqlTransaction tran = null;
try {...