string 簡單參數用法

string   sql   =   "select   *   from   table1   where   username='{0}'   and   password={1}"  
  sql   =   String.Format(sql,"用戶名","口令");