带参数的SQL语句? 400 报错

带参数的SQL语句? 400 报错

代码如下：

sql = "Insert into tb_zhipiao (paycom,payBank,payBankN,gatcom,gatBank,gatBankN,payfor,hander,money,Id) values('"
//      + zhipiaoForm.getPaycom()
//      + "','"
//      + zhipiaoForm.getPayBank()
//      + "','"
//      + zhipiaoForm.getPayBankN()
//      + "','"
//      + zhipiaoForm.getGatcom()
//      + "','"
//      + zhipiaoForm.getGatBank()
//      + "','"
//      + zhipiaoForm.getGatBankN()
//      + "','"
//      + zhipiaoForm.getPayfor()
//      + "','"
//      + zhipiaoForm.getHander()
//      + "','"
//      + zhipiaoForm.getMoney()
//      + "','"
//      + zhipiaoForm.getId()
//      + "')";

 哪出错了啊？？？？？