I am trying to do a page that adds a new record to an access database from an asp page and get the following error:Microsoft OLE DB Provider for ODBC Drivers error '80040e14'

[Microsoft][ODBC Microsoft Access Driver] Syntax error (missing operator) in query expression 'a new product')'.

/admin/add_product.asp, line 28

The SQL that I am using is as follows:

cid = Request.Querystring("cid")
prodType = Request.Form("type")
strSQL = "INSERT INTO product (rangeID, typeID, productName, productDescription)" & _
" VALUES (" & cid & "," & prodType & ",'" & Replace(Request.Form("name"),"'","''") & _
"'," & Replace(Request.Form("desc"),"'","''") & "')"

cid and prodType are both numerical values, and the others are text entries from form fields.

Can anyone help?