如何插入数据库SQL事务?

How to insert into database SQL transaction?

我有一个Log方法:

public void Log(string log)
{
   command = new SqlCommand() { Connection = connection };
   command.CommandText = "INSERT INTO Logs (Date, Login, Transact) " +
      $"VALUES ('{DateTime.Now.ToString("yyyy-MM-dd HH:mm:ss.fff")}', '{Login}', '{log}')";
   connection.Open();
   command.ExecuteNonQuery();
   connection.Close();
}

在日志字符串中我有一个这样的值:

"INSERT '/*something*/'"

"UPDATE: '/*smth*/' => '/*smth*/'"

但它不起作用 - 我收到错误消息:

Incorrect syntax

我该怎么做?

command.CommandText = "INSERT INTO Logs (Date, Login, Transact) " +
   $"VALUES (@date, @login, @transact)";
command.Parameters.Add("@date", SqlDbType.DateTime).Value = DateTime.Now.ToString("yyyy-MM-dd HH:mm:ss.fff");
command.Parameters.Add("@login", SqlDbType.NChar).Value = Login;
command.Parameters.Add("@transact", SqlDbType.Text).Value = log;