How is the query passed in ASP?
What may be your issue is that since you are building a string and have quoted string in the query, you will need to escape these. Typically this is done using two double quotes.
i.e., "White" == ""White""