Nice article. I have a question about parameterized SQL statements. I have to implement a simple search on a title field in an ACCESS database. I want the person to be able to put in a word and find all items with that word in the title. what would the SQL statement look like? What would be used to represent the parameter?

Is Is it
SELECT Orders.OrderID
FROM Orders
WHERE OrderTitle LIKE "*?*"

how would I represent a parameter of any string length (I will be asking them to put in a word). For an Access 2003 database? I am using ASP.NET and VB.NET