Thanks for your input. It confirmed my ideas.

I am using VBScript that gets a parameter called "ID" and then uses the parameter to build an SQL statement in a...