sql server 参数化 in sql语句参数

1、SQL语句带参数的
（1）、

public static int Updata(string sql)

{

SqlConnection conn = new SqlConnection(connString);

SqlCommand cmd = new SqlCommand(sql, conn);

try

{

conn.Open();

return cmd.ExecuteNonQuery();

}

catch (Exception ex)

{

throw ex;
        }
        finally
        {
            conn.Close();
        }
      }

  (2)
      public static int Updata(string sql,,SqlParameter[] param)
    {
        SqlConnection conn = new SqlConnection(connString);
        SqlCommand cmd = new SqlCommand(sql, conn);
        try
        {
            conn.Open();
            cmd.Parameters.AddRange(param)
            return cmd.ExecuteNonQuery();
        }
        catch (Exception ex)
        {

            throw ex;
        }
        finally
        {
            conn.Close();
        }
      }
    3:SQL语言
      string sql=“Select LoginId,LoginPWD from Admin Where LoginId=@LoginId and LoginPWD=@LogindPWD”;
      SqlParameter[] parameter= new SqlParameter[]
      {
          new SqlParameter("@LoginId",objAdmin.LoginId),
           new SqlParameter("@LoginPWD",objAdmin.LoginPWD),
      }