'oSQL => gültige Connection
'sSQLStatement => "SELECT * FROM settings WHERE name LIKE @name"
 
Dim oCommand As SqlClient.SqlCommand = New SqlClient.SqlCommand(sSQLStatement, _
  oSQL)
Dim oAdapter As SqlClient.SqlDataAdapter = New SqlClient.SqlDataAdapter()
Dim oTable As DataTable = New DataTable
 
oCommand.Parameters.Add("name", 25,SqlDbType.Text).Value = "bla'"
 
oAdapter.SelectCommand = oCommand
 
oAdapter.Fill(oTable)