You have the right " in the wrong spot.

try this:

strSQL="SELECT * from SHAPES WHERE color = '" & Search$ & "'"


You will also need the ' before and after your variable if it is a string.