ADO.NET parameterized query. ... I have been using the SQLcommand in .NET to construct a parametrerized dynamic query. ... the parameter is not escaped.<BR>For example when I do <BR><BR>dim ...