MSSQL LIKE and IN statements in ADO problem

[gregarican]

Steve Holden wrote:

> Now Google for "sql injection vulnerability" and tell us why this is a
> bad idea.

The original poster didn't specify if they were writing
production-level code on in Internet-facing server so I didn't exactly
infer a context. You are correct in your statement. I was just pointing
out how substitutions operate if they were indeed an option.