ASP.NET

Dim ITContactLabel As Label = DirectCast(FormView1.FindControl("ITContactLabel"), Label)
Dim ITContactTextBox As TextBox = DirectCast(FormView1.FindControl("PRJ_ITContactTextBox"), TextBox)

If (User.IsInRole("MyDomain\My_AD_Group_X") <> "true") Then
    '   hide the ITContact label
    ITContactLabel.Style("visibility") = "hidden"
    ITContactTextBox.Visible = "false"
End If

string value = DataBinder.Eval(e.Row.DataItem, "SAPLeader").ToString();
                  dd.SelectedValue = value;
                  dd.SelectedIndex = dd.Items.IndexOf(dd.Items.FindByText(value.ToString()));

LinkButton LinkButtonControl = new LinkButton();
LinkButtonControl.ID = Name;
<pre>

Now, I feel that the following code using ViewStateUserKey is the right approach:
<pre>
protected override OnInit(EventArgs e) {
     base.OnInit(e); 
     if (User.Identity.IsAuthenticated)
        ViewStateUserKey = Session.SessionID; }
<pre>

However; another person I work with thinks that the Httputility.htmlencode method is the best way to correct the problem. First I don't know if the Httputility.htmlencode method is the best way and if so I would I use it?

private static void Task()
{
      String CS = ConfigurationManager.ConnectionStrings["DBCS"].ConnectionString;
      using (SqlConnection con = new SqlConnection(CS))
      {
        con.Open();
        DateTime Newdate;
        DateTime dt;
        SqlCommand cmd1 = new SqlCommand("select Date from tblInsertDate", con);
        cmd1.ExecuteNonQuery();
        List<String> dates = new List<String>();
        using (SqlDataReader rdr = cmd1.ExecuteReader())
        {
           while (rdr.Read())
           {
              dt = DateTime.ParseExact(rdr["Date"].ToString(), "dd/MM/yyyy", null);
              String cd = DateTime.Now.ToString("dd/MM/yyyy");
                        DateTime CD = DateTime.ParseExact(cd, "dd/MM/yyyy", CultureInfo.InvariantCulture);

              int result = DateTime.Compare(dt, CD);
              
              if (result < 0)
              {
                 Newdate = dt.AddDays(7);
                 DateTime Newdateonly = Newdate.Date;
                 String Ndate = Newdateonly.ToString("dd/MM/yyyy");
                 dates.Add(Ndate);
                 break;
              }
           }
        }
        foreach (String dataList in dates)
        {
           SqlCommand cmd2 = new SqlCommand("update tblInsertDate set Date=@Newdate where Date=@whereDate", con);
                    cmd2.Parameters.AddWithValue("@Newdate", dataList);
                                      cmd2.Parameters.AddWithValue("@whereDate",dt);
                    cmd2.ExecuteNonQuery();
                }
            }
}

SqlCommand cmd2 = new SqlCommand("update tblInsertDate set Date=@Newdate where Date=@whereDate", con);
                    cmd2.Parameters.AddWithValue("@Newdate", dataList);
                    cmd2.Parameters.AddWithValue("@whereDate",dt);