node sql 语句传入参数写法 用 ${}

// 登录验证用户
let loginVerification = function (  name , password ) {
  let _sql = `SELECT * from users where userName= "${name}" and pass = "${password}"` ;
  return query( _sql)
}