title: Classic ASP / Parameterized Full Text Query
body: <p>When writing parameterized queries in Classic ASP, I have been using the following syntax:</p>
  
  <pre><code>Set cmdConn = Server.CreateObject("ADODB.Command")
  Set cmdConn.ActiveConnection = Conn
  cmdConn.Prepared = True
  
  SQL = " INSERT INTO myTable (column1, column2, column3) VALUES (?, ?, ?); "
  
  Set newParameter = cmdConn.CreateParameter("@column1", ad_Integer, ad_ParamInput, Len(input1), input1)
  cmdConn.Parameters.Append newParameter
  Set newParameter = cmdConn.CreateParameter("@column2", ad_Integer, ad_ParamInput, Len(input2), input2)
  cmdConn.Parameters.Append newParameter
  Set newParameter = cmdConn.CreateParameter("@column3", ad_Integer, ad_ParamInput, Len(input3), input3)
  cmdConn.Parameters.Append newParameter
  
  cmdConn.CommandText = SQL
  cmdConn.Execute
  </code></pre>
  
  <p>And I'm of the understanding (self-taught), that where I use <code>@column1</code> when appending a new parameter, this allocates the parameter to that particular column. I could be wrong tho'. So this has totally confused me when trying to write a full-text query.</p>
  
  <p>This is my original full-text query:</p>
  
  <pre><code>SQL = "SELECT * FROM myTable WHERE MATCH (column1, column2, column3) AGAINST ('"&amp;input&amp;"' IN BOOLEAN MODE)"
  </code></pre>
  
  <p>Could somebody show me what syntax to use for this query?</p>
  
  <p>I would imagine the SQL would look like this:</p>
  
  <pre><code>SQL = "SELECT * FROM myTable WHERE MATCH (column1, column2, column3) AGAINST (? IN BOOLEAN MODE)"
  </code></pre>
  
  <p>But not sure what to put for the newParameter string. Any help and explanations gratefully received...</p>