Umm... doing it with replace is may be a bad idea unless you're careful about escaping and formatting your parameters correctly (sql injection attacks can't happen if you use parameterized queries). Are you sure the parameters could appear in any order? Regards, Rob -- RMTrack a new bug tracking tool. Available now from http://www.rmtrack.com

With VB6/ADO you do not use named parameters in the CommandText... you use positional parameters: cmd.Parameters.Append cmd.CreateParameter("Entry_ID", adInteger, adParamInput, , lEntry_ID) cmd.CommandText = "SELECT * FROM Entry WHERE ID = ?" More or less the same was as with the ADO.NET ODBC provider. Regards, Rob -- RMTrack a new bug tracking tool. Available now from http://www.rmtrack.com