添加成员拼写sql语句

String sql="insert into examstudent values("+student.getFlowId()+","+student.getType()+",'"+student.getIdCard()+"','"+student.getExamCard()
+"','"+student.getStudentName()+"','"+student.getLocation()+"',"+student.getGrade()+")";
return JDBCTools.update(sql);