.NET中含有参数的mysql的写法

using (MySqlConnection mysqlConnection = new MySqlConnection(Properties.Settings.Default.connString))
                {
                    mysqlConnection.Open();
                    MySqlTransaction mysqlTrans = mysqlConnection.BeginTransaction();
                    string strsql = "insert into t_record values(null,?details_id,?serial_num,?oper_person,?remark)";

                    string details_id = "?details_id";
                    string serial_num = "?serial_num";
                    string oper_person = "?oper_person";
                    string remark = "?remark";

                    MySqlParameter[] parms = new MySqlParameter[]
                   {
                    new MySqlParameter(details_id,MySqlDbType.Int32,11),
                    new MySqlParameter(serial_num,MySqlDbType.VarChar,20),
                    new MySqlParameter(oper_person,MySqlDbType.VarChar,20),
                    new MySqlParameter(remark,MySqlDbType.VarChar,50),
                   };

                    parms[0].Value = 15;
                    parms[1].Value = SerialNum;
                    parms[2].Value = "liush";
                    parms[3].Value = "未包含可扫描的序列号";

                    MySqlCommand mysqlcmd = new MySqlCommand();
                    mysqlcmd.Connection = mysqlConnection;
                    mysqlcmd.CommandType = CommandType.Text;
                    mysqlcmd.CommandText = strsql;
                    mysqlcmd.Transaction = mysqlTrans;

                    foreach (MySqlParameter pram in parms)
                        mysqlcmd.Parameters.Add(pram);

                    mysqlcmd.ExecuteNonQuery();
                    mysqlTrans.Commit();
                }