//拼接sql语句：
                if (!string.IsNullOrEmpty(model.Email))
                {
                    where += " and a.email like @email ";
                }
    
                //因为like使用参数化查询，所以这里要特殊处理下
                model.Email = string.Format("%{0}%", model.Email);