Here's a way of avoiding having to make a variable to hold the array of parameters
using (SqlCommand cm = new SqlCommand(sql, cn))
{
cm.Parameters.AddRange(
new SqlParameter[]
{
new SqlParameter("@TaskID", SqlDbType.Int) { Value = (int)dr["BSTaskID"] },
new SqlParameter("@DateNow", SqlDbType.DateTime) { Value = DateTime.Now } ,
new SqlParameter("@ExecDate", SqlDbType.DateTime) { Value = execDate } ,
new SqlParameter("@UserId", SqlDbType.Int) { Value = (int)dr["BSUserId"] },
new SqlParameter("@TaskParameters", SqlDbType.VarChar) { Value = parametersXML }
});
cm.ExecuteNonQuery();
}
all in one fell swoop