> Hi I wonder whether in MS Access we can actually give a comment what do you mean by 'a comment' in this case? > Is this true, if yes then if I use MS access as my database and if I don't use stored procedure. It will still be fine as user can not use SQL injection to my database ?? what does SQL injection have to do with comments? SQL Injection attacks can be prevented quite easily in Access in just the same way as with SQL Server. In fact, Access is less injectable because it doesn't support multiple SQL statements in a single procedure and has limited subquery support Now if you'll rephrase your question and explain what you're getting at, maybe we can help you sort this out. j