multiple search fields - security

I have tried repeatedly to get the DA search wizard to search multiple fields with one form post, however, I fail every time.

I've since reverted to the following type of query, but would like to know if this is secure or does it leave the database open to an SQL injection attack;

select fieldid, field1, field2, field3 from tablename
where field1 LIKE % keyword % OR field2 LIKE % keyword % OR field3 LIKE % keyword %

This works fine - but I'd like a bit if reassurance, please!

Chris

depends on how the key word is being used in the query.

If you use an advanced recordset and use the Variables section of the recordset dialog to add the keywords to the query, there should not be a problem with this. DW adds code to the variables that will escape special characters.

Many thanks, Jason.