ADO Database ASP.Net

<%@ Page Language="C#" %>
"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">

    protected void srcGuestbook_Inserting(object sender, ObjectDataSourceMethodEventArgs e)
    {
        e.InputParameters.Add("IPAddress", Request.UserHostAddress);
    }



    
    

            id="frmGuestbook"
        DataSourceID="srcGuestbook"
        DefaultMode="Insert"
        Runat="server">
        
                    ID="lblComment"
            Text="Comment:"
            AssociatedControlID="txtComment"
            Runat="server" />
                    id="txtComment"
            Text='<%# Bind("comment") %>'
            TextMode="MultiLine"
            Columns="50"
            Rows="4"
            Runat="server" />
                    id="btnInsert"
            Text="Add Entry"
            CommandName="Insert"
            Runat="server" />
         

    
            id="grdGuestbook"
        DataSourceID="srcGuestbook"
        CssClass="guestbook"
        Runat="server" />
            id="srcGuestbook"
        TypeName="Guestbook"
        SelectMethod="GetEntries"
        InsertMethod="AddEntry"
        OnInserting="srcGuestbook_Inserting"
        Runat="server" />
    

    


File: Guestbook.cs
using System;
using System.Data;
using System.Data.SqlClient;
using System.Web.Configuration;
public class Guestbook
{
    private string _conString;
    public SqlDataReader GetEntries()
    {
        SqlConnection con = new SqlConnection(_conString);
        SqlCommand cmd = new SqlCommand();
        cmd.Connection = con;
        cmd.CommandText = "SELECT Id,IPAddress,Comment,EntryDate FROM Guestbook";
        con.Open();
        return cmd.ExecuteReader(CommandBehavior.CloseConnection);
     }
     public void AddEntry(string IPAddress, string comment)
     {
         SqlConnection con = new SqlConnection(_conString);
         SqlCommand cmd = new SqlCommand();
         cmd.Connection = con;
         cmd.CommandText = "INSERT Guestbook (IPAddress,Comment)" + " VALUES (@IPAddress, @Comment)";
         cmd.Parameters.AddWithValue("@IPAddress", IPAddress);
         cmd.Parameters.AddWithValue("@Comment", comment);
         using (con)
         {
             con.Open();
             cmd.ExecuteNonQuery();
         }
     }
     public Guestbook()
     {         
         _conString = WebConfigurationManager.ConnectionStrings["Guestbook"]. ConnectionString;
     }
}
File: Web.config

  
             connectionString="Data Source=.\SQLEXPRESS;
         AttachDbFilename=|DataDirectory|MyDatabase.mdf;Integrated Security=True;User Instance=True" />