Especially in the case of date/time values, you should pass the parameter as a placeholder. (Never send anything to an SQL statement by direct modification of text!) Consult the ODBC driver to see how the date/time value can be provided.