trying to insert image into my data base all the time saving the same thing? : While i am trying to insert image into my data base it all the time saves this:

> 0xFFD8FFE145AB4578696600004D4D002A00000008000A011200030000000100000000021300030000000100010000011A0005000000010000018E011B0005000000010000019601280003000000010002000001320002000000140000019E010F000200000064000001B201100002000000640000021687690004000000010000

even if the image is null

plss helpppp

the c#:

     if (FileUpload1.PostedFile.FileName!="")
            {
                Byte[] image;
                Stream s = FileUpload1.PostedFile.InputStream;
                BinaryReader br = new BinaryReader(s);
                image = br.ReadBytes((Int32)s.Length);
                SqlCommand NewUser = new SqlCommand("INSERT INTO [User] Values (@username,@password,@name,@lastname,@location,@profesion,@email,@gender,@money,@pro,@xp,@lv,@m1,@m2,@m3,@m4,@m5,@d1,@d2,@d3,@d4,@d5,@im,@phone);", c);
                NewUser.Connection = c;
                NewUser.Parameters.AddWithValue("@username", txtuser.Text);
                NewUser.Parameters.AddWithValue("@password", txtpass.Text);
                NewUser.Parameters.AddWithValue("@name", txtFName.Text);
                NewUser.Parameters.AddWithValue("@lastname", txtLName.Text);
                NewUser.Parameters.AddWithValue("@location", ddlcountry.SelectedItem.Text);
                NewUser.Parameters.AddWithValue("@profesion", txtprofession.Text);
                NewUser.Parameters.AddWithValue("@email", txtemail.Text);
                NewUser.Parameters.AddWithValue("@gender", rbgendere.SelectedItem.Text);
                NewUser.Parameters.AddWithValue("@money", 0);
                NewUser.Parameters.AddWithValue("@pro", DBNull.Value);
                NewUser.Parameters.AddWithValue("@xp", 0);
                NewUser.Parameters.AddWithValue("@lv", 1);
                NewUser.Parameters.AddWithValue("@m1", 0);
                NewUser.Parameters.AddWithValue("@m2", 0);
                NewUser.Parameters.AddWithValue("@m3", 0);
                NewUser.Parameters.AddWithValue("@m4", 0);
                NewUser.Parameters.AddWithValue("@m5", 0);
                NewUser.Parameters.AddWithValue("@d1", 0);
                NewUser.Parameters.AddWithValue("@d2", 0);
                NewUser.Parameters.AddWithValue("@d3", 0);
                NewUser.Parameters.AddWithValue("@d4", 0);
                NewUser.Parameters.AddWithValue("@d5", 0);
                NewUser.Parameters.AddWithValue("@im", image);
                NewUser.Parameters.AddWithValue("@phone", PhoneNumber.Text);
                Session["CurentUserid"] = txtuser.Text;
                c.Open();
                int row=NewUser.ExecuteNonQuery();
                c.Close();
                    if (row>0)
                    {
                        LabelError.Text = "success";
                    }
                Session["Conect"] = (bool)true;
                Response.Redirect("Finish Had Member.aspx", true);       
            }
                else
                {
                    SqlCommand NewUser = new SqlCommand("INSERT INTO [User] Values (@username,@password,@name,@lastname,@location,@profesion,@email,@gender,@money,@pro,@xp,@lv,@m1,@m2,@m3,@m4,@m5,@d1,@d2,@d3,@d4,@d5,@im,@phone);", c);
                    NewUser.Connection = c;
                    NewUser.Parameters.AddWithValue("@username", txtuser.Text);
                    NewUser.Parameters.AddWithValue("@password", txtpass.Text);
                    NewUser.Parameters.AddWithValue("@name", txtFName.Text);
                    NewUser.Parameters.AddWithValue("@lastname", txtLName.Text);
                    NewUser.Parameters.AddWithValue("@location", ddlcountry.SelectedItem.Text);
                    NewUser.Parameters.AddWithValue("@profesion", txtprofession.Text);
                    NewUser.Parameters.AddWithValue("@email", txtemail.Text);
                    NewUser.Parameters.AddWithValue("@gender", rbgendere.SelectedItem.Text);
                    NewUser.Parameters.AddWithValue("@money", 0);
                    NewUser.Parameters.AddWithValue("@pro", DBNull.Value);
                    NewUser.Parameters.AddWithValue("@xp", 0);
                    NewUser.Parameters.AddWithValue("@lv", 1);
                    NewUser.Parameters.AddWithValue("@m1", 0);
                    NewUser.Parameters.AddWithValue("@m2", 0);
                    NewUser.Parameters.AddWithValue("@m3", 0);
                    NewUser.Parameters.AddWithValue("@m4", 0);
                    NewUser.Parameters.AddWithValue("@m5", 0);
                    NewUser.Parameters.AddWithValue("@d1", 0);
                    NewUser.Parameters.AddWithValue("@d2", 0);
                    NewUser.Parameters.AddWithValue("@d3", 0);
                    NewUser.Parameters.AddWithValue("@d4", 0);
                    NewUser.Parameters.AddWithValue("@d5", 0);
                    NewUser.Parameters.AddWithValue("@im", DBNull.Value);
                    NewUser.Parameters.AddWithValue("@phone", PhoneNumber.Text);
                    Session["CurentUserid"] = txtuser.Text;
                    c.Open();
                    NewUser.ExecuteNonQuery();
                    c.Close();
                    Session["Conect"] = (bool)true;
                    Response.Redirect("Finish Had Member.aspx", true);
                }

