mister.magoo - Thank you! That finally got it!

I will also look into how I can rewrite this with SQL Injection attacks in mind, and see if I cannot go with a more parameterized approach to safeguard against those possibilities.