How would insert records into a SQL Server table based on a string value retuned from a Web Service call ?

here is an implemetation using Linq to XML
private void InsertIntoDatabase(string xml)
        {
                XDocument doc = XDocument.Parse(xml);

                var query = from records in doc.Elements("PWMDocuments").Elements("Document")
                            select records;

                if (null != query)
                {
                    foreach (XElement record in query)
                    {
                       //Do database insert here                    }
                }
        }

How would you revise the following code so that the xml string values are not hardcoded into the source code ?

The records read in are not the same each time the application is executed. There is no way of telling in advance how many records will be read into the application. I gave a specific example of 3 records read in, purely as an example so that you could see the record layout. Thanks for your time.

                   string xml =
                        "<PWMDocuments>\n" +
                        "<Document>\n <MailID>20080930163836771214506</MailID>\n <NoOfPages>4</NoOfPages>\n  <NoOfAttributes>9</NoOfAttributes>\n </Document>\n" +
                        "<Document>\n <MailID>20080930172853771294506</MailID>\n <NoOfPages>3 </NoOfPages>\n  <NoOfAttributes>9</NoOfAttributes>\n </Document>\n" +
                        "<Document>\n <MailID>20080943172853746294842</MailID>\n <NoOfPages>2 </NoOfPages>\n  <NoOfAttributes>5</NoOfAttributes>\n </Document>\n " +
                        "</PWMDocuments>";
 
                  using (System.Data.DataSet ds = new System.Data.DataSet())
                  {
                        using (System.IO.StringReader sr = new System.IO.StringReader(xml))
                        {
                              ds.ReadXml(sr);
                        }
 
 
                        using (System.Data.SqlClient.SqlConnection conn = new System.Data.SqlClient.SqlConnection("your connection string"))
                        {
                              conn.Open();
                              System.Data.SqlClient.SqlCommand comm = conn.CreateCommand();
                              comm.CommandType = System.Data.CommandType.Text;
 
                              foreach (System.Data.DataRow row in ds.Tables[0].Rows)
                              {
                                    comm.CommandText =
                                          string.Format("INSERT INTO tblGetListOfDocuments (MailID,NoOfPages,NoOfAttributes) VALUES ({0},{1},{2})", row["MailID"].ToString(), row["NoOfPages"].ToString(), row["NoOfAttributes"].ToString());
                                    comm.ExecuteNonQuery();
                              }
 
                              conn.Close();
                        }
                  }