sql syntax error '80040e14'

Hi,

I am trying to do a page that adds a new record to an access database from an asp page and get the following error:Microsoft OLE DB Provider for ODBC Drivers error '80040e14'

[Microsoft][ODBC Microsoft Access Driver] Syntax error (missing operator) in query expression 'a new product')'.

/admin/add_product.asp, line 28

The SQL that I am using is as follows:

cid = Request.Querystring("cid")
prodType = Request.Form("type")
strSQL = "INSERT INTO product (rangeID, typeID, productName, productDescription)" & _
" VALUES (" & cid & "," & prodType & ",'" & Replace(Request.Form("name"),"'","''") & _
"'," & Replace(Request.Form("desc"),"'","''") & "')"

cid and prodType are both numerical values, and the others are text entries from form fields.

Can anyone help?

Hi robmc,
If cid is a string type, you need to add a single quote around it, example:
... VALUES ('" & cid & "'," ...

Do the same for all the rest. Hope that will solve your problem.

you're missing a quote in front of the desc

see it? it's in red --

strSQL = "INSERT INTO product (rangeID, typeID, productName, productDescription)" & _
" VALUES (" & cid & "," & prodType & ",'" & Replace(Request.Form("name"),"'","''") & _
"','" & Replace(Request.Form("desc"),"'","''") & "')"

Thanks for your help guys, I don't think I would have spotted that in a million years!