First off I'm using SQL to read and all that held within an access database. I wish to prevent SQL injection since how I"m doing it and what I'm reading that I don't completely understand I am a possible victim to attack at some point if I don't fix it. here are snippets of code relevant to my login form.

http://pastebin.com/jCGBTVWK