求助 SQL 语句有问题， 大家帮忙看看

Question

数字类型的不要写单引号
最好用带参数的SQL语句StringBuilder sql = new StringBuilder("INSERT INTO  [dbo].[OperateLog]");
            sql.Append("([UserId],[OperateName],[ObjectId],[OperateDesc],[OperateTime]) ");
            sql.Append("VALUES (@UserId,@OperateName,@ObjectId,@OperateDesc ,@OperateTime)");
            SqlParameter[] par = new SqlParameter[]
            {
                new SqlParameter("@UserId",ol.User.UserId),
                new SqlParameter("@OperateName",ol.OperateName),
                new SqlParameter("@ObjectId",ol.ObjectId),
                new SqlParameter("@OperateDesc",ol.OperateDesc),
                new SqlParameter("@OperateTime",ol.OperateTime),
            };