string sql = "select * from Users where UserName like ‘%‘+@UserName+‘%‘ or UserID like ‘%‘+@UserID+‘%‘"; SqlParameter[] p = { new SqlParameter("@UserName", txt), new SqlParameter("@UserID", txt),}; DataTable dt = SQLHelper.ExecuteDataTable(sql, p); Repeater1.DataSource = dt; Repeater1.DataBind();