OleDbCommand objCmd = new OleDbCommand("select * from customers where CustomerID = @CustomerID");
objCmd.Parameters.Add("@CustomerID", "ALFKI");