SqlParameter的应用

                       var p = new SqlParameter[2];
                        p[0] = new SqlParameter
                        {
                            ParameterName = "Name",
                            SqlDbType = SqlDbType.NVarChar,
                            Value = TBox.Text
                        };

                        p[1] = new SqlParameter
                        {
                            ParameterName = "PK",
                            SqlDbType = SqlDbType.UniqueIdentifier,
                            Value = PK
                        };
                        db.Database.ExecuteSqlCommand(@"update db.tab1 set LogStatus = 'Success', UpdateDateTime = GETDATE(), DN = @DN  where pk = @PK", p);