HELP! ! With my reader = cm.executereader invalid operation exception was un handled

'System.InvalidOperationException' occurred in MySql.Data.dll"

Imports MySql.Data.MySqlClient


Public Class Login
    Public cn As New MySqlConnection("server=localhost;user id=root;password=root;database=elmasgarden")
    Dim cm As New MySqlCommand
    Dim Reader As MySqlDataReader
    Function EscapeQuote(ByVal msData As Object) As String
        Return (Replace(msData, "'", "''"))
    End Function
    Private Sub Button1_Click(sender As Object, e As EventArgs) Handles btnlogin.Click
        Try
            Dim str_user, str_pass As String
            Dim query As String
            DbOpen()
            query = "Select * from login where Username= '" & EscapeQuote(txtuser.Text) & "' AND Password = '" & EscapeQuote(txtpass.Text) & "'"
            cm = New MySqlCommand(query, cn)
            'fatality
            Reader = cm.ExecuteReader
            'ai wins

            Reader.Read()

            If Reader.HasRows Then
                'login success
                str_pass = Reader.Item("Password").ToString
                str_user = Reader.Item("Username").ToString
                lblname.Text = Reader.GetString(1)
                lblusertype.Text = Reader.GetString(5)

            Else
                str_pass = ""
                str_user = ""
                lblname.Text = ""
                lblusertype.Text = ""
            End If


            If txtuser.Text = "" Or txtpass.Text = "" Then
                MsgBox("Please Enter Username and Password", MsgBoxStyle.Information, "")
            ElseIf StrComp(txtuser.Text, str_user, CompareMethod.Binary) Or StrComp(txtpass.Text, str_pass, CompareMethod.Binary) Then
                MsgBox("Invalid Username or Password!", MsgBoxStyle.Exclamation, "")
            End If
            

            Me.Dispose()


            Panels.ShowDialog()

            txtuser.Clear()
            txtpass.Clear()
            
     Catch ex As MySqlException
            MessageBox.Show(ex.Message)
        Finally
            DbClose()
        End Try
 


    End Sub