insert statement into mysql with asp.net

im having trouble inserting form values into a mySQL database

Im can insert the following static statement no problem

string sql = "INSERT INTO mailinglist (name,email) VALUES('my name','my email')";

MySqlCommand cmd = new MySqlCommand(sql, conn)

but i need to do this with form values and i thought i'd just be able to add variable values to the end of the SQL string but it's throwing errors.

string sql = "INSERT INTO mailinglist (name,email) VALUES("+name.Text+","+email.Text+")";

Any ideas ? ( it's probably simple). Can i use parameters ?

Thanks