中间的number是数字类型
sql="select * from student where number='"+number+"' order by ID ASC"
------------------------------------------------------------------------------------------------------------------------
sql="select * from student where ID="& id id是字符类型