To help protect against SQL statement exploits, never create SQL queries using string concatenation.

• 为了防止SQL语句利用,决不能串联字符串创建SQL查询。