ODBC Excel as a database using named parameters

[Anil_G (Anil Gorthi)]

@Phil_Kelsey

For mssql db types we have to use ? And positional argumnets only…normal parameterization would not work

Unable Insert Parameters Into Database

If you want to parameterize and avoid SQL injection attacks, you have to do the following for MySQL statements (queries and non-queries): in the CommandType property choose StoredProcedure in the Sql field (statement) replace all values that you want to transform in parameters with a question mark (?); don’t use @parametername, that is for Microsoft SQL, and don’t use apostrophes like this ‘?’, use just plain simple question marks in the Parameters sub-window, you must store all the par…

Or one more way is completely remove parameters and use the variable directly in the statement

Eg : "Select * From [abc] Where col1='" + var1 + "'"

Hope this helps

Cheers