I\'ve been using a parameterized query to insert values into an Oracle table, like so:
var q = \"insert into MyTable(Field1, Field2...) values(:Field1, :Field2..
command.BindByName = true;
Please see this explination.