I am having trouble with my Login Page!!!

public partial class Login : System.Web.UI.Page
{
    protected void Page_Load(object sender, EventArgs e)
    {

    }
    protected void Button1_Click(object sender, EventArgs e)
    {

        SqlConnection con = new SqlConnection(ConfigurationManager.ConnectionStrings["PassConnectionString"].ConnectionString);
      con.Open();

      string insCmd = "Insert into TableSecurity (EmailAddress, Password, Level) values (@EmailAddress, @Password, @Level)";
      SqlCommand insertUser = new SqlCommand(insCmd, con);
      insertUser.Parameters.AddWithValue("@EmailAddress", TextBox1.Text);
      insertUser.Parameters.AddWithValue("@Password", TextBox2.Text);
      insertUser.Parameters.AddWithValue("@Level", TextBox1.Text);

 string cmdStr="select count(*) from TableCEO, TableIALO where EmailAddress='" + TextBox1.Text + "'";
        SqlCommand Checkuser=new SqlCommand (cmdStr,con);
        int temp=Convert.ToInt32(Checkuser.ExecuteScalar().ToString());
        if (temp==1)
        {
            string cmdStr2="Select Password from TableSecurity where Password='" + TextBox2.Text + "'";
            SqlCommand pass=new SqlCommand(cmdStr2, con);
            string password=pass.ExecuteScalar().ToString();

     

            if(password == TextBox2.Text)
            {
                Session["New"] = TextBox1.Text;
                Response.Redirect("Secure.aspx");
            }
            else
            {
                Label1.Visible = true;
                Label1.Text = "Invalid Password!!!";
            }
        }
            else
            {
                Label1.Visible = true;
                Label1.Text = "Invalid UserName!!!";
            }
        }
    protected void PasswordRecovery1_SendingMail(object sender, MailMessageEventArgs e)
    {

    }
}