拼接Sql语句的写法

string strSQL = "select CategoryName from {1} where CategoryID in({0})";
strSQL = string.Format(strSQL, CategoryID, TBName);