Visual Basic 6 : SQL injection