Sqlexception Was Unhandled By User Code Using Sqlexpress 2005 And VS 2008

I did executed a db - contact form page successfully in the same project with the same connection string, but for this page its doing error and so I commented the binary file saving codes and all and put just simple 2 fields to see if the db is connecting and surprisingly getting sqlexception error and no data is written to the db. I am using sqlexpress 2005 and VS 2008. After this code I am listing the error I got.

Imports System.Data.SqlClient
Imports System.IO.FileInfo
Imports System.Data
Partial Class picture2
Inherits System.Web.UI.Page
Protected Sub upButton_Click(ByVal sender As Object, ByVal e As System.EventArgs) Handles upButton.Click
'' SOME CODES ARE HERE
Dim ctr As Integer = 0
Dim fleName As String
Dim fleLength As Integer
fleName = FileUpload1.FileName
fleLength = FileUpload1.PostedFile.ContentLength
Dim fleDatasource As New SqlDataSource
fleDatasource.ConnectionString = ConfigurationManager.ConnectionStrings("CandidatesConnectionString").ToString()
fleDatasource.InsertCommandType = SqlDataSourceCommandType.Text
fleDatasource.InsertCommand = "INSERT INTO Picture (picLength,picName) values (&picLength, &picName)"
fleDatasource.InsertParameters.Add("picLength", fleLength)
fleDatasource.InsertParameters.Add("picName", fleName)
fleDatasource.Insert()
----------------------- executed and now the prg returns to my code with the following sqlexception error box and while expanded I got this info ------------------------
message - Incorrect syntax near "&"
Line number 1
Errorcode -2146232060

in order to evaluate an indexed property, the property must be qualified and the arguments must be explicitly supplied by the user. fleDatasource.Insert() the prg stops in the code with the green highlight on the fleDatasource.Insert().