SearchService.GetUsers C# (CSharp) Méthode

    public List<User> GetUsers(string query)
    {
        //clear user list
           Users.Clear();

           if (query == "")
           {
           return null;
           }

           //search users in database
           try
           {
           string connStr = ConfigurationManager.ConnectionStrings["fuddleConnectionString"].ConnectionString;
           conn = new SqlConnection(connStr);

           cmd = new SqlCommand("SELECT UserName FROM [aspnet_Users] WHERE UserName like '%" + query + "%'", conn);
           conn.Open();
           rdr = cmd.ExecuteReader();
           while (rdr.Read())
           {
               //get the name
               string name = ((string)rdr["UserName"]);
               //add to users list
               User newUser = new User{name = name};
               Users.Add(newUser);

           }

           if (rdr != null)
               rdr.Close();
           }
           finally
           {
           conn.Close();
           conn.Dispose();
           }
           //return the json data
           return Users;
    }