求助sqlDr = sqlcmd.ExecuteReader()附近有语法错误

[程大白话]

Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button1.Click
        Dim sqlcmd As New SqlCommand
        Dim sqlDr As SqlDataReader
        Using con As New SqlConnection(My.Settings.JZZF_WGXT_DB)
            con.Open()
            sqlcmd.Connection = con
            sqlcmd.CommandText = "select * from User where gyh='" & Trim(TextBox1.Text) & "' and mm ='" & Trim(TextBox2.Text) & "'"
            WriteLog(sqlcmd.CommandText)
            sqlDr = sqlcmd.ExecuteReader()
            
        If sqlDr.HasRows Then
            If sqlDr.Read Then
                Frm_YWCL.Show()
            Else
                MsgBox("用户名密码错误！")
            End If
        End If
            con.Close()
        End Using

运行起来总是提示sqlDr = sqlcmd.ExecuteReader() User附近有语法错误，请求大神帮忙看看