Фильтрация запроса в MySQL

Imports MySql.Data.MySqlClient
 
Public Class adress_driver
 
Dim mysqlconect As MySqlConnection
Dim COMMANDS As MySqlCommand
Dim autocol As New AutoCompleteStringCollection
Dim INI_Server_con As New ini(My.Application.Info.DirectoryPath + "/****.***_**")
 
Private Sub comdo_town()
 
TextBox1.AutoCompleteMode = AutoCompleteMode.Suggest
        TextBox1.AutoCompleteSource = AutoCompleteSource.CustomSource
        Dim autocol As New AutoCompleteStringCollection
 
        mysqlconect = New MySqlConnection
        mysqlconect.ConnectionString = "server=" & INI_Server_con.GetString("*******", "*******", "(none)") & ";userid=*******;password=*******;database=" & INI_Server_con.GetString("******", "*******", "(none)")
        Dim Reader As MySqlDataReader
 
        Try
 
            Dim Query As String
           
            mysqlconect.Open()
            Dim mysql As String
            
            Query = "select * from towns" 'towns = одна из таблиц БД
 
 
            COMMANDS = New MySqlCommand(Query, mysqlconect)
            Reader = COMMANDS.ExecuteReader
 
            While Reader.Read
                Dim sName = Reader.GetString("name")
               
                autocol.Add(sName)
               
            End While
 
            mysqlconect.Close()
        Catch ex As MySqlException
            MsgBox(ex.Message)
        Finally
            mysqlconect.Dispose()
        End Try
        TextBox1.AutoCompleteCustomSource = autocol
 
End Sub
End Class

Query = "SELECT * FROM towns WHERE КОЛОНКА='" & Переременная & "'"

Query = "SELECT clsf_countries.full_name, clsf_address_towns.name, clsf_address_region.name, clsf_address_district.name FROM clsf_address_region INNER JOIN ((clsf_address_towns INNER JOIN clsf_address_district ON (clsf_address_district.region_id = clsf_address_towns.region_id) AND (clsf_address_district.country_id = clsf_address_towns.country_id) AND (clsf_address_towns.district_id = clsf_address_district.id)) INNER JOIN clsf_countries ON clsf_address_towns.country_id = clsf_countries.id) ON (clsf_address_towns.region_id = clsf_address_region.id) AND (clsf_address_region.country_id = clsf_address_towns.country_id) WHERE clsf_countries.full_name='" & text1.text & "' AND clsf_address_towns.name='" & text2.text & "';"