upadate data in database

error---->>>Must declare the scalar variable "@Upid".
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code. 

Exception Details: System.Data.SqlClient.SqlException: Must declare the scalar variable "@Upid".

Source Error: 
Line 75:         con.Open();
Line 76:         cmd.Connection = con;
Line 77:         cmd.ExecuteNonQuery();
Line 78:         con.Close();
Line 79:     }

Source File: c:\Users\swd\Desktop\final project asp.net\App_Code\Logindata.cs    Line: 77

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Data;
using System.Data.SqlClient;
using System.Configuration;

public class Logindata
{
    SqlCommand cmd;
    SqlConnection con;
    SqlDataAdapter da;
    DataSet ds;

	public Logindata()
	{
        con = new SqlConnection(ConfigurationManager.ConnectionStrings["conn"].ConnectionString);
	}

    public void insertdata(Loginpropertylayer p)
    {
        cmd = new SqlCommand();
        cmd.CommandText = "add_registration";
        cmd.CommandType = CommandType.StoredProcedure;
        cmd.Parameters.AddWithValue("@Upid", p.Upid);
        cmd.Parameters.AddWithValue("@firstname", p.firstname);
        cmd.Parameters.AddWithValue("@lastname", p.lastname);
        cmd.Parameters.AddWithValue("@address", p.address);
        cmd.Parameters.AddWithValue("@birthdate", p.birthdate); 
        cmd.Parameters.AddWithValue("@state", p.state);
        cmd.Parameters.AddWithValue("@city", p.city);

        cmd.Parameters.AddWithValue("@Gender", p.Gender);
        cmd.Parameters.AddWithValue("@Education", p.Education);
        cmd.Parameters.AddWithValue("@mobilenumber", p.mobilenumber);
        cmd.Parameters.AddWithValue("@Pic", p.Pic);
        cmd.Parameters.AddWithValue("@Email", p.Email);
        cmd.Parameters.AddWithValue("@username", p.username);
        cmd.Parameters.AddWithValue("@password", p.password);
        cmd.Parameters.AddWithValue("@cpassword", p.cpassword);

        con.Open();
        cmd.Connection = con;
        cmd.ExecuteNonQuery();
        con.Close();
    }

    public void updatedata(Loginpropertylayer p)
    {
        cmd = new SqlCommand("update tbl_userprofile set firstname=@firstname,lastname=@lastname,address=@address,birthdate=@birthdate,state=@state,city=@city,Gender=@Gender,Education=@Education,mobilenumber=@mobilenumber,Pic=@pic,Email=@Email,uername=@username,password=@password where Upid=@Upid",con);
        cmd.Parameters.AddWithValue("@Upid", p.Upid);
        cmd.Parameters.AddWithValue("@firstname", p.firstname);
        cmd.Parameters.AddWithValue("@lastname", p.lastname);
        cmd.Parameters.AddWithValue("@address", p.address);
        cmd.Parameters.AddWithValue("@birthdate", p.birthdate);
        cmd.Parameters.AddWithValue("@state", p.state);
        cmd.Parameters.AddWithValue("@city", p.city);

        cmd.Parameters.AddWithValue("@Gender", p.Gender);
        cmd.Parameters.AddWithValue("@Education", p.Education);
        cmd.Parameters.AddWithValue("@mobilenumber",p.mobilenumber);
        cmd.Parameters.AddWithValue("@Pic",p.Pic);
        cmd.Parameters.AddWithValue("@Email", p.Email);
        cmd.Parameters.AddWithValue("@username",p.username);
        cmd.Parameters.AddWithValue("@password",p.password);
        //cmd.Parameters.AddWithValue("@cpassword", p.cpassword);

        con.Open();
        cmd.Connection = con;
        cmd.ExecuteNonQuery();
        con.Close();
    }


    public DataSet getdata(string uname)
    {
        da = new SqlDataAdapter("select * from tbl_userprofile where username='"+uname+"'", con);
        ds = new DataSet();
        da.Fill(ds);
        return ds;
    }

    public void clear()
    { 
       
    }
}