Using parameter ODBC statements

[Boggie]

I have a block of code that will insert text into an access database.
However the text itself contains characters that make the SQL statement bomb.
The text is held in variable q. Endstring will contain multiple lines of
text. I've only shown two match statements (newsgroups and message-id).
Please help me convert this to a parameterized statement.
Thanks a ton in advance!!

string endstring =" ";
int columncount = 0;
while (true)
{
Match varb = Regex.Match(q, "Newsgroups:");
if (varb.Success)
{
columncount = columncount + 1;
if (endstring == " ")
endstring = q;
else
endstring = endstring + ", " + q;
}
Match varc = Regex.Match(q, "Message-ID:");
if (varc.Success)
{
columncount = columncount + 1;
if (endstring == " ")
endstring = q;
else
endstring = endstring + ", " + q;
}
if (q == ".") //End of Article
{
string finishedstring = " ";
if (columncount == 1)
finishedstring = "INSERT INTO Listgroup (Newsgroups) VALUES " + "("
+ endstring + ")";
if (columncount == 2)
finishedstring = "INSERT INTO Listgroup (Newsgroups, Message-ID)
VALUES " +"(" + endstring + ")";
OdbcCommand myCommand = new OdbcCommand(finishedstring, odbcConnection1);
myCommand.ExecuteNonQuery();
odbcConnection1.Close();
break;
}