private static byte[] getDocument(int documentId)
{
    using (sqlConnection cn = new sqlConnection("..."))
    using (sqlCommand cm = cn.CreateCommand())
    {
        cm.CommandText = @"
            SELECT DocumentData
            FROM   Document
            WHERE  DocumentId = @Id";
        cm.Parameters.AddWithValue("@Id",documentId);
        cn.Open();
        return cm.ExecuteScalar() as byte[];
    }
}