SQL njection 2

[falcifer <falcifer2001 () yahoo es>]

how can i insert an isert command in a sql sentence that looks like
select * from parameter???
the database is access and when i try to insert something like 

pameter=table;insert%20into%20clientes(uspw,pwus)%20values('j','j')

the ODBC returns this error

error '80040e14' 

[Microsoft][Controlador ODBC Microsoft Access] Se encontraron caracteres
después del final de la instrucción SQL. 


/visornew.asp, line 10

it means: "there are characteres after the the sql sentence"
-- 
falcifer <falcifer2001 () yahoo es>