sql += "and t1.CarNum like '%@CarNum%' "; //错误的写法
sql += "and t1.CarNum like '%'+@CarNum+'%' ";//正确的写法