Private Sub ExecuteSqlStatement(param As String, connString As String)
  Using conn As New SqlConnection(connString)
    conn.Open()

    Using cmd As New SqlCommand("SELECT * FROM Fornitori WHERE RagioneSociale LIKE @RagioneSociale + '%'", conn)
      Dim dt As New DataTable()
      cmd.Parameters.AddWithValue("@RagioneSociale", param)

      Using da As New SqlDataAdapter(cmd)

        da.Fill(dt)
        dataGridView1.DataSource = dt
      End Using
    End Using

    conn.Close()
  End Using
End Sub