C#MySQL 参数化查询类 防止SQL注入

//Sqlhelp类

using System;
using System.Data;
using MySql.Data.MySqlClient;
public class Sqlhelp
{

    public static string connSting= "server='Server IP'; User ID='User Name'; password='Password';database='DB Name'";
    

    

    public Sqlhelp()
    {
        //
        // TODO: Add constructor logic here
        //
    }
    #region LoadDate(参数化查询，返回Datatable)
    /// <summary>
    /// 参数化查询，防止SQL注入
    /// </summary>
    /// <param name="sql">参数化SQL语句</param>
    /// <param name="parameters">参数化参数</param>
    /// <returns>Datatable</returns>
    public static DataTable LoadData(string sql,params MySqlParameter[] parameters)
    {
        DataSet ds = new DataSet();
        MySqlConnection conn = new MySqlConnection(connSting);
        try
        {
            conn.Open();
            MySqlCommand