clear ALL textboxes and label

For Each ctrl In Controls
                If TypeOf ctrl Is TextBox Or TypeOf ctrl Is Label Then
                    ctrl.Text = String.Empty
                End If
            Next

How to exploit the SQL Injection Attack

Try ' OR ''=' for user name and password.