string sqlstring = @"INSERT INTO [dbo].[102chengyuan]
           ([UserName]
           ,[PassWord]
           ,[Grade]
           ,[Sex]
           ,[Age]
           ,[BirthDay]
           ,[Remark]
           ,[RegisterInfo]
           ,[InTime])
     VALUES
           (@UserName,@PassWord,@Grade,@Sex,@Age,@BirthDay,@Remark,@RegisterInfo,@InTime)";

但是这个后面好像没有需要转义的啊