 <p>Instead of using a 2nd connection object, you could change your connection string and use MARS (<a href="http://msdn.microsoft.com/en-us/library/h32h3abf%28v=vs.80%29.aspx" rel="nofollow">Multiple active result set</a>) for this purpose. Add the following statement to your connection string:</p> <pre><code>MultipleActiveResultSets=True </code></pre> <p>EDIT: And like the other's said, use SqlParameters for your parameters and not string concatenation. It's not only a security issue, but also a huge performance hit!</p>