sql = "select * from Ressourcen where Username=’" & Benutzername & "‘"

sql = "select * from Ressourcen where Username = ?"
cmd = New OleDbCommand(sql, con)
cmd.Parameters.Add("@Param1", OleDb.OleDbType.VarWChar, 255).Value = _
  Benutzername