ADO.net

Solution to
Ado.net parameters:

String = 
    "INSERT INTO inventoryItems (name, productCode)" +
    "VALUES (?, ?)";
var addItemStmt:SQLStatement = new SQLStatement();
addItemStmt.sqlConnection = conn;
addItemStmt.text = sql;

// set parameter values
addItemStmt.parameters[0] = "Item name";
addItemStmt.parameters[1] = "12345";

addItemStmt.execute();