ASP.NET

private void Button1_Click(object sender, System.EventArgs e)
		{
			try
			{
				card = DropDownList1.SelectedItem.Text.ToString();
				name = TextBox34.Text;
				age = TextBox35.Text;
				gender = TextBox36.Text;
				con = new SqlConnection();
				con.ConnectionString = Session["sqlcon"].ToString();
				con.Open();
                              cmd = new SqlCommand();
				cmd.CommandType = CommandType.Text;
				cmd.CommandText = "Insert into card_details values('"+Session["User_ID"]+"',getDate(),'"+name+"','"+age+"','"+gender+"','"+card+"')";
                              cmd.Connection = con;
				cmd.ExecuteNonQuery();
                              cmd.Dispose();
				con.Close();
}
			catch (Exception exp)
			{
				Label39.Visible = true;
				Label39.Text = "Exception occured review log file for details";
				ExceptionHandler.HandleException("Exception",exp);
			}
			finally
			{
				if (rdr != null)
				{
					rdr.Close();
				}
				if (con != null)
				{
					con.Close();
					con.Dispose();
				}
			}
		}