//第一种参数化查询
//SqlParameter spName = new SqlParameter("@name", Name);
//cmd.Parameters.Add(spName);
//SqlParameter spPwd = new SqlParameter("@pwd", pwd);
//cmd.Parameters.Add(spPwd);
//第二种
SqlParameter[] spList = new SqlParameter[2];
spList[0] = new SqlParameter("@name",Name);
spList[1] = new SqlParameter("@pwd",pwd);
cmd.Parameters.AddRange(spList);