I'm sorry I don't know much about Access databases
Actually- it uses pretty much the same SQL your familiar with from MySQL.
in this case, it simply looks like there is no actual query being created from the POST'ed data; that is, it is returning all records simply because it hasn't been told otherwise (think, performing a "query" that is just the table name- it returns the entire contents of the table).