114 得分

Is it safe to not parameterize an SQL query when the parameter is not a string?