sqlserver 变量拼凑

sqlserver 变量拼接
    string cmd = "update [Tlb_VODContentServer]  set BaseUrl='" + cs.BaseUrl + "',CurrentLoading='" + cs.CurrentLoading + "',IsAvailable='" + cs.IsAvailable + "',DiskFreeSpaceInByte='" + cs.DiskFreeSpaceInByte + "',LastBeatTime='" + cs.LastBeatTime + "' where ContentServerId='"+cs.ContentServerId+"';";