ASP.NET

protected void ValidatePassword(object source, System.Web.UI.WebControls.ServerValidateEventArgs args)
        {
            string sqlCmd =
                "SELECT Password FROM User_Profile WHERE Password = " +
                Util.Quote(Password.Value.Trim());

            OdbcCommand command = new OdbcCommand(sqlCmd, con);
            OdbcDataReader reader = command.ExecuteReader();
            if (reader.Read())
            {
                string storedHashedPassword = (string)reader["Password"];
                string givenHashedPassword = FormsAuthentication.HashPasswordForStoringInConfigFile    
(Password.Value.ToString(),"SHA1");
                if(storedHashedPassword == givenHashedPassword)
                {
                    args.IsValid = true;
                    reader.Close();
                }
            }
                          
        }

if (!(IsValid))
            {
                return;
            }
            Response.Write("Entered Password is correct ");