使用sqlparameter的方式，最终执行的sql语句

exec sp_executesql N'select top 1 ID,ZhangHu,MiMa,RID,ShiJian,EndTime,ISIP,PreTime,PreIP from YongHu where ZhangHu=@ZhangHu and MiMa=@MiMa'
,N'@ZhangHu varchar(8),@MiMa varchar(8)',@ZhangHu='xx',@MiMa='xx'