Dim dbCommand As OleDbCommand
            Dim strDept, strPath As String
            Dim DBInsert As New OleDbCommand
 
            strPath = Application.StartupPath & "\data\" & table & ".MDB"
 
            DBConn = New OleDbConnection("Provider=Microsoft.Jet.OLEDB.4.0;" _
            & "Jet OLEDB:Database Password=" & dbpass & ";" _
            & "DATA SOURCE=" _
            & strPath)
 
                      DBInsert.CommandText = "update table set name= '" & _
                        txt_name.Text & "'  WHERE (id = " & id & ")"
 
            DBInsert.Parameters.Add("@name", OleDbType.VarWChar).Value = "'"
 DBInsert.Parameters.Add("@name", OleDbType.VarWChar).Value = "["
 DBInsert.Parameters.Add("@name", OleDbType.VarWChar).Value = "]"
 DBInsert.Parameters.Add("@name", OleDbType.VarWChar).Value = "-"
'etc.
 
            DBInsert.CommandType = CommandType.Text
 
 
            DBInsert.Connection = dbConn
            DBInsert.Connection.Open()
            DBInsert.ExecuteNonQuery()
 
            DBConn.Close()