一个简单的问题

Question

 cmd.CommandText   =   "select   distinct   Menu_Id   from   F_TREENODE     where   Menu_Name='"   +   Title+"'"; 

Answer 1

  public   int   ReturnID(string   Title) 
                { 
                        Open(); 
                        cmd   =   new   SqlCommand(); 
                        cmd.CommandText   =   "select   distinct   Menu_Id   from   F_TREENODE     where   Menu_Name='"   +   Title+"'"; 
                        cmd.Connection   =   cn; 
                        sdr   =   cmd.ExecuteReader(); 
                        while   (sdr.Read()) 
                        { 
                                MenuID   =   sdr.GetInt32(0); 
                        } 
                        Close(); 
                        return   MenuID;                     
                } 

Answer 2

cmd.CommandText = "select distinct Menu_Id from F_TREENODE  where Menu_Name= '''+ Title+'''";