比如.net中的
            SqlCommand cmd = new SqlCommand("select * from Users where name=@name and pwd=@pwd",conn);
            SqlParameter[] p = { new SqlParameter("@name", name), new SqlParameter("@pwd", pwd) };
            cmd.Parameters.AddRange(p);
--------------------------------------------------------
"select * from Users where name=@name and pwd=@pwd"
这样的