Well, OK - I've been told! Thank you anyway!
I've removed the ? and it now posts the 'score' into the database... but not the 'user'.
It's clearly to do with the query string I'm sending but I can't see why.
I've tried changing it to: "score="&score&"user="&user but that doesn't work either.
Could I have one more piece of wisdom form you please? ;-)