VB.NET, MS Access, and parameters [RESOLVED]

[shadowfyre]

This is a duplicate of a thread I started in the DB forum. After thinking about it, I thought I might get more help here as there are more eyes on it.

So I'm going along, doing a fairly simple project for a software testing group that needs to communicate the defects they find. Basically the Access DB stores the defect number, date, and description. So I have :

Dim InsertData As String = "INSERT INTO Defects (DefectNumber,  DefectDescription, Date)" _
& "VALUES(" & defectnum & ", '" & TextBox4.Text & "', '" & TextBox3.Text & "');"

And it works great until someone used a double quote in the description (TextBox4.Text). So someone tells me to use parameters to get around that.

I bought Microsoft ADO.NET Step by Step and didn't help at all. Most of it's examples were based using SQL Server, not Access, and I understand that there is some difference.

Any advice on where I can get some helpful information?