Does any one know a way to pass user supplied parameters to an sql query in a reports module?

I just started a new job where they have an existing dnn intranet website version 2...(something)-where they are using a reports module to run this query

SELECT     order_number AS OrderNo, tracking_number AS TrackingNo, CONVERT(Char(10), ShipDate, 110) as ShipDate, customer_number AS CustNo, customer_name AS CustName, address1 AS Addr,
                      city AS City, state AS State, postal_code AS Postal
FROM         TBL_SHIPPING_TRACKING_NUMBER
Where Order_number like '%' + @orderno + '%'
 

It works in the old app. There is actually a place on the form where you can put in the parameters for the report.

I have dnn version 04.09.00 installed and have to make the report behave the same way as the existing app.  But I get an error when I run the same query

There was an error executing the data source: There is an error in your SQL at line 4: Must declare the scalar variable "@orderno".
 Does anyone have an idea how I can get the same behaviour in dnn 04.09.00?

Thanks

This is so desperatly needed.  Unable to use the reports module as URL parameters doesn't find it's way through.

Maybe a fast track, quickfix, leap patch, exception cycle, Urgent business forced deploy and so on and soon .. :D