以這段代碼為例：IAmazonSimpleDB client = new AmazonSimpleDBClient(Amazon.RegionEndpoint.USEast1);        SelectResponse response = client.Select(new SelectRequest() { SelectExpression = "SELECT * FROM `foo` where FooID = '" + id + "'" });我可以這樣重寫(xiě)它：IAmazonSimpleDB client = new AmazonSimpleDBClient(Amazon.RegionEndpoint.USEast1);        SelectResponse response = client.Select(new SelectRequest() { SelectExpression = "SELECT * FROM `foo` where FooID = '{0}'", id });但據(jù)我了解，這仍然容易被注射，對(duì)吧？還有什么我可以在這里做的嗎？我們沒(méi)有使用 SQL，所以我不能做 SQL 參數(shù)。