The criteria should be entered via a form, that way you can
1) validate the criteria
2) being on a form the values can be referred to in a query, a report or any other object so long as the form is open.
3) another reason for doing this, is when you close the report the form with the criteria...