calling asp parameters in sql command in code behand?

[Hilda]

how to call an asp parameter in a sql command
exp: cmd.CommandText = "SELECT name FROM server WHERE code="+TextBox1.Text;
is it correct? .