1.总起来就四个字CURD C=create U=update R=read D=delete
对应语句就是insert into | update | select | delete
2.注意防止sql injection
txtNam = getRequestString("CustomerName");
txtAdd = getRequestString("Address");
txtCit = getRequestString("City");
txtSQL = "INSERT INTO Customers (CustomerName,Address,City) Values(@0,@1,@2)";
db.Execute(txtSQL,txtNam,txtAdd,txtCit);
这方法叫做参数化sql语句，先建立一个sql语句的样式pattern，可变部分作为参数传入。
3.第一次了解了foreign key 的用法
select customers.customerid,orders.orderdate,customers.city,customer.country
from customers inner join orders on customers.customerid=orders.customerid where customers.city=‘london‘ and orders.orderid <77
inner 所得的结果是join