DB Search Command

[jmcilhinney]

USE the example I showed you.

Never use string concatenation to build SQL statements if it can possibly be avoided. E.g.

Dim query As String = "SELECT * FROM Table1 WHERE @Column1 = '' OR Column1 = @Column1 AND @Column2 = '' OR Column2 = @Column2"
Dim command As New SqlCommand(query, connection)
 
command.Parameters.AddWithValue("@Column1", Me.TextBox1.Text.Trim())
command.Parameters.AddWithValue("@Column2", Me.TextBox2.Text.Trim())

This is one option so that an empty TextBox will match every row. Alternatively you could write some conditional code that won't add the parameters at all for empty controls. No point handling the TextChanged events though. Just get all the values once when you execute the query.