ASP.NET

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Data;
using System.Data.SqlClient;
using System.Configuration;

public partial class Default2 : System.Web.UI.Page
{
    protected void Page_Load(object sender, EventArgs e)
    {

    }
    protected void Button1_Click(object sender, EventArgs e)
    {
        string strcon = ConfigurationManager.ConnectionStrings["param"].ConnectionString;
        SqlConnection con = new SqlConnection(strcon);
        con.Open();

        string str = "select * from Admin_info";
        SqlCommand cmd = new SqlCommand(str, con);
        SqlDataReader r;

        r = cmd.ExecuteReader();
        //int ii = 0;
        if (r.HasRows == true)
        {
            while (r.Read())
            {
                if (r[7].ToString() == TextBox1.Text)
                {
                    Label1.Text = r[14].ToString();
                    Panel2.Visible = true;
                    Panel1.Visible = false;
                    TextBox2.Text = r[13].ToString();
                    Label3.Text = r[0].ToString();



                }
                else
                {
                    Label4.Text = "Wrong Number";
                }
            }
        }

    }
    protected void Button2_Click(object sender, EventArgs e)
    {
        if (Label1.Text == TextBox3.Text)
        {
            Panel2.Visible = false;
            Panel3.Visible = true;
        }
        else
        {
            Label4.Text = "Enter correct answer";

        }
    }
    protected void Button3_Click(object sender, EventArgs e)
    {
        SqlDataSource1.UpdateParameters["Password"].DefaultValue = TextBox4.Text;
        SqlDataSource1.UpdateParameters["ConformPassword"].DefaultValue = TextBox5.Text;
        SqlDataSource1.UpdateParameters["Admin_id"].DefaultValue = Label3.Text;
        SqlDataSource1.Update();
        Page.ClientScript.RegisterClientScriptBlock(typeof(Page), "done", "alert('Password Updated ')", true);
        Response.Redirect("AdminLogin.aspx");
    }
}