ASP.NET

Private Sub lblRegister_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles lblRegister.Click
        Dim bResult As Boolean = False
        Dim myConnection As OdbcConnection
        Dim myCommand As OdbcCommand
        Dim strInsert As String
        Dim strGoodPassword As String
        Dim strSQL As String
        strSQL = String.Empty
        
        myConnection = New OdbcConnection("Driver={MySQL ODBC 3.51 Driver};Server=localhost;Database=myDb;User=myUSERassword=myPW;Option=3;")
        strSQL = String.Format("SELECT myUserName FROM myTable WHERE (email='{0}');", txtUserName.text)
        myConnection.Open()
        strGoodPassword = CType(myCommand.ExecuteScalar, String)
        If Not strGoodPassword Is Nothing Then
            If strGoodPassword = txtUserName.Text Then
                bResult = True
            Else
                lblMessage.Text = "That user name is already taken!"
                lblMessage.Text &= "  Please choose another user name."
            End If
        Else
            lblMessage.Text = "That user name is already taken!"
            lblMessage.Text &= "  Please choose another user name."
        End If
        strInsert = "INSERT into membersinfotbl (FirstName,LastName,Password,Phone,Email,Profession,StrAddress,City,State,ZipCode)value (?,?,?,?,?,?,?,?,?,?)"
        
        myCommand As New OdbcCommand(strInsert,myConnection)
        myCommand.Parameters.Add("@FirstName", txtFirst.Text)
        myCommand.Parameters.Add("@LastName", txtLast.Text)
        myCommand.Parameters.Add("@Password", txtPassword.Text)
        myCommand.Parameters.Add("@Phone", txtPhone.Text)
        myCommand.Parameters.Add("@Email", txtEmail.Text)
        myCommand.Parameters.Add("@Profession", txtProfession.Text)
        myCommand.Parameters.Add("@StrAddress", txtAddress.Text)
        myCommand.Parameters.Add("@City", txtCity.Text)
        myCommand.Parameters.Add("@State", txtState.Text)
        myCommand.Parameters.Add("@ZipCode", txtZipCode.Text)        
        myCommand.ExecuteNonQuery()
        myConnection.Close()
End Sub