Tutorial by Examples

This is the typical approach for novice developers building SQL action queries. They are vulnerable to the Bobby Tables type SQL Injection attacks. Dim strSQL As String strSQL = "INSERT INTO Employees chrFirstName, chrLastName, chrPhone " _ & "VALUES ('" & M...

This approach will prevent a user from embedding a second SQL statement in their input for execution. Dim strSQL As String Dim db As DAO.Database Dim qdf As DAO.QueryDef strSQL = "PARAMETERS [FirstName] Text(255), [LastName] Text(255), [Phone] Text(255); " _ & "INS...