SqlParameter 使用

                //System.Data.SqlClient.SqlParameter[] sqlParameters = new System.Data.SqlClient.SqlParameter[]{ };
                //sqlParameters[0] = new System.Data.SqlClient.SqlParameter("@name","123");

                System.Data.SqlClient.SqlParameter sp = new System.Data.SqlClient.SqlParameter("@name", "Pudding");

                SQLHelper.ExecuteScalar(CommandType.Text, "select count(*) from xx where 姓名='@Name' and 电话='@tel'", sp);