引号看不懂

string sql = "Select count(Id) From user Where usename ='" + userName + "' And password = '" + password + "'";