Parameterized Query

Sql = "INSERT INTO test(t1, t2, t3) VALUES(?, ?, ?)" 
 

with DbCmd 

        .CommandText = Sql 

        .CommandType = adCmdText 
 
    .Parameters.Append    .CreateParameter("@t1", adVarChar, adParamInput, 4) 

    .Parameters.Append    .CreateParameter("@t2", adVarChar, adParamInput, 20) 

    .Parameters.Append    .CreateParameter("@t3", adVarChar, adParamInput, 200) 
 
    .Parameters("@t1") = "t1" 

    .Parameters("@t2") = "t2" 

    .Parameters("@t3") = "t3" 

   

    .Execute 

End with