Поиск по полю в БД

"Select * From TableName Where Поле1 = '" & TextBox1.Text & "'"

SELECT * FROM [PERSONALS] WHERE ([LASTNAME] LIKE '%' + @LASTNAME + '%')

SELECT PERSONALS.FIRSTNAME, PERSONALS.MIDNAME, PERSONALS.BARCODE, PERSONALS.LASTNAME FROM PERSONALS CROSS JOIN HR_DIVISIONS WHERE (PERSONALS.LASTNAME LIKE @LASTNAME + '%')

Public Class protocols
    Inherits System.Web.UI.Page
 
    Protected Sub Page_Load(ByVal sender As Object, ByVal e As System.EventArgs) Handles Me.Load
        Dim disc As DataView, row
        Dim strWhere
        If IsNothing(Session.Item("ID_PERSONA")) Then
            Response.Redirect("logon.aspx?url=" & Server.UrlEncode("protocols.aspx"))
        End If
        strWhere = ""
        SqlDataSource3.SelectCommand() = String.Format("SELECT HR_DIVISION_ID FROM STAFF WHERE ((PERSONA_ID = {0}) AND (VIL_LS IS NULL))", Session.Item("ID_PERSONA"))
        disc = CType(SqlDataSource3.Select(DataSourceSelectArguments.Empty), DataView)
        For Each row In disc
            strWhere = strWhere + String.Format(", {0}", row("HR_DIVISION_ID").ToString) + GetChildrenID(row("HR_DIVISION_ID"))
        Next
 
        SqlDataSource2.SelectCommand = String.Format("SELECT PERSONALS.LASTNAME as [Фамилия], PERSONALS.FIRSTNAME as [Имя], PERSONALS.MIDNAME as [Отчество], PERSONALS.BARCODE as [Номер_в_ЦБД], HR_DIVISIONS.NAME_DIVISION FROM PERSONALS INNER JOIN STAFF ON PERSONALS.PERSONA_ID = STAFF.PERSONA_ID INNER JOIN HR_DIVISIONS ON STAFF.HR_DIVISION_ID = HR_DIVISIONS.HR_DIVISION_ID WHERE (STAFF.HR_DIVISION_ID IN (0{0}) AND PERSONALS.WORK_STATUS= 'STUDY') ORDER BY HR_DIVISIONS.NAME_DIVISION, PERSONALS.LASTNAME", strWhere)
 
 
        ListPersonals.GroupBy(ListPersonals.Columns("Подразделение"))
 
        If DateFrom.Items.Count = 0 Then
            For i = Now.ToOADate To DateAdd("m", -1, Now).ToOADate Step -1
                DateFrom.Items.Add(New ListItem(Date.FromOADate(i).ToShortDateString, Date.FromOADate(i).ToString("yyyy.MM.dd")))
                DateTo.Items.Add(New ListItem(Date.FromOADate(i).ToShortDateString, Date.FromOADate(i).ToString("yyyy.MM.dd")))
            Next
        End If
        Dim rowKey As DataKey = GridView1.SelectedDataKey
        If Not IsNothing(rowKey) Then
            SqlDataSource1.SelectCommand = String.Format("SELECT  DATE_TIME , CONVERT(CHAR(20),DATE_TIME,108) AS TIME_1,IN_OUT, TERRITORY, CAMPUS_NUMBER, CAT_NAME, ZONA_NAME  FROM DBA.PROTOCOL2MONTH WHERE ([CAMPUS_NUMBER] = '{0}') AND DATE_TIME BETWEEN '{1} 00:00:00' AND '{2} 23:59:59.999'", rowKey.Value, DateFrom.Text, DateTo.Text)
        End If
        'SqlDataSource1.SelectCommand = String.Format("SELECT  DATE_TIME , CONVERT(CHAR(20),DATE_TIME,108) AS TIME_1,IN_OUT, TERRITORY, CAMPUS_NUMBER, CAT_NAME, ZONA_NAME  FROM DBA.PROTOCOL2MONTH WHERE ([CAMPUS_NUMBER] = {0}) AND DATE_TIME BETWEEN '{1} 00:00:00' AND '{2} 23:59:59.999'", "04000000060908", DateFrom.Text, DateTo.Text)
 
    End Sub
 
 
 
    Protected Sub GridView1_SelectedIndexChanged(ByVal sender As Object, ByVal e As EventArgs) Handles GridView1.SelectedIndexChanged
        Dim rowKey As DataKey = GridView1.SelectedDataKey
 
        SqlDataSource1.SelectCommand = String.Format("SELECT  DATE_TIME , CONVERT(CHAR(20),DATE_TIME,108) AS TIME_1,IN_OUT, TERRITORY, CAMPUS_NUMBER, CAT_NAME, ZONA_NAME  FROM DBA.PROTOCOL2MONTH WHERE ([CAMPUS_NUMBER] = '{0}') AND DATE_TIME BETWEEN '{1} 00:00:00' AND '{2} 23:59:59.999'", rowKey.Value, DateFrom.Text, DateTo.Text)
 
    End Sub
 
    Function GetChildrenID(ByVal ID_parent)
        Dim disc, row, strChildren
        strChildren = ""
        SqlDataSource3.SelectCommand() = String.Format("SELECT HR_DIVISION_ID, PARENT_ID FROM [HR_DIVISIONS] WHERE ([PARENT_ID] = {0})", ID_parent)
 
        disc = CType(SqlDataSource3.Select(DataSourceSelectArguments.Empty), DataView)
        For Each row In disc
            strChildren = String.Format("{0}, {1}{2}", strChildren, row("HR_DIVISION_ID"), GetChildrenID(row("HR_DIVISION_ID")))
 
        Next
        Return strChildren
    End Function
 
    Protected Sub ListPersonals_CustomButtonCallback(ByVal sender As Object, ByVal e As DevExpress.Web.ASPxGridView.ASPxGridViewCustomButtonCallbackEventArgs) Handles ListPersonals.CustomButtonCallback
        If e.ButtonID <> "Select" Then
            Return
        End If
        Label1.Text = "test2"
        Label1.DataBind()
        ListPersonals.Selection.UnselectAll()
        ListPersonals.Selection.SelectRow(e.VisibleIndex)
 
 
        'Dim rowKey = ListPersonals.GetRowValues(e.VisibleIndex, "Номер_в_ЦБД")
 
        SqlDataSource1.SelectCommand = String.Format("SELECT  DATE_TIME , CONVERT(CHAR(20),DATE_TIME,108) AS TIME_1,IN_OUT, TERRITORY, CAMPUS_NUMBER, CAT_NAME, ZONA_NAME  FROM DBA.PROTOCOL2MONTH WHERE ([CAMPUS_NUMBER] = '{0}') AND DATE_TIME BETWEEN '{1} 00:00:00' AND '{2} 23:59:59.999'", "04000000060908", DateFrom.Text, DateTo.Text)
        'ProtocolSKUD.DataBind()
    End Sub
 
    Protected Sub SqlDataSource2_Selecting(ByVal sender As Object, ByVal e As System.Web.UI.WebControls.SqlDataSourceSelectingEventArgs)
 
    End Sub
 
    Protected Sub Button1_Click(ByVal sender As Object, ByVal e As EventArgs) Handles Button1.Click
 
    End Sub
End Class