Parameters用法

SQL = "Insert Into titledetail (DETAILS_NAME, DETAILS_EMAIL, DETAILS_SUBJECT, DETAILS_CONTENT, TITLES_ID)Values (?, ?, ?, ?, ?)"  '建立参数
        Cmd = New OleDbCommand(SQL, Conn) '建立Command对象
        '向SQL语句添加参数
        Cmd.Parameters.Add(New OleDbParameter("DETAILS_NAME", OleDbType.Char, 255))
        Cmd.Parameters.Add(New OleDbParameter("DETAILS_EMAIL", OleDbType.Char, 255))
        Cmd.Parameters.Add(New OleDbParameter("DETAILS_SUBJECT", OleDbType.VarChar))
        Cmd.Parameters.Add(New OleDbParameter("DETAILS_CONTENT", OleDbType.VarChar))
        Cmd.Parameters.Add(New OleDbParameter("TITLES_ID", OleDbType.Integer))
        '给参数赋值
        Cmd.Parameters(0).Value = Session("user_name")
        Cmd.Parameters(1).Value = DETAILS_EMAIL.Text
        Cmd.Parameters(2).Value = DETAILS_SUBJECT.Text
        Cmd.Parameters(3).Value = DETAILS_CONTENT.Text
        Cmd.Parameters(4).Value = TITLES_ID
 
        Cmd.ExecuteNonQuery()

        SQL = "Update titles Set TITLES_LASTPOSTDATE=Now(),TITLES_NUM=TITLES_NUM+1 Where TITLES_ID=" & TITLES_ID
        Cmd = New OleDbCommand(SQL, Conn)
        Cmd.ExecuteNonQuery()
        Conn.Close()