You will get an empty DataTable if no records match, so you can check on the number of records returned:
if (dt.Rows.Count > 0)
And, slightly off topic, please read the comments below your question, then Google the terms SQL Injection and Parameterized SQL statements. Try starting with this.