cmd.commandText="Select * from LoginUser where Name=@Name"
cmd.Parameters.add("@Name",varchar).value="fff"