前端输入字符串英文或者中文无法校验

检验sql语句是否加   ''

错 String sql = "SELECT * FROM website where account=" + account;

对 String sql = "SELECT * FROM website where account='" + account+"'";