The problem is in your Default.aspx.cs
In the button click event, you must use the control ID ie.
control1.name which you have used in your Default.aspx page.
the code should be as below
protected void btnInsert_Click(object sender, EventArgs e)
{
con.Open();
cmd = new SqlCommand("insert into emp(name,lastname,phone) values('" + control1.name + "','" + control1.lastname + "','" + control1.phoneno + "'", con);
cmd.ExecuteNonQuery();
con.Close();
}