Change Password

Changepassword.aspx

<table cellpadding="5" cellspacing="5"  >

        <tr>

            <td>UserName</td><td>

                <asp:TextBox ID="txtChangeUserName" runat="server" ReadOnly="true"></asp:TextBox></td>

        </tr>

        <tr>

            <td>New Password</td><td>

                <asp:TextBox ID="txtNewPassword" runat="server" TextMode="password"></asp:TextBox></td>

        </tr>

        <tr>

            <td>Confirm Password</td><td>

                <asp:TextBox ID="txtConfirmNewPassword" runat="server" TextMode="password"></asp:TextBox></td>

        </tr>

        <tr>

            <td colspan="2" align="center">

                <asp:Button ID="cmdChangePassword" runat="server" Text="Change Password" OnClientClick="return checkPassword();" OnClick="cmdChangePassword_Click" />

            </td>

        </tr>

</table>

Changepassword.aspx.cs(Code Behind)

using System.Data.SqlClient;

string sql;

    DataSet ds;

SqlConnection con = new SqlConnection(_ConnectionString);
            con.Open();
            SqlTransaction trans = con.BeginTransaction();

SqlCommand cmd = con.CreateCommand();
            cmd.Transaction = trans;

    protected void Page_Load(object sender, EventArgs e)

    {

        if (Session["did"] != null & Session["user"] != null)

        {

        }

        else

        {

            Response.Redirect("login.aspx");

        }

        lblUserName.Text = Session["user"].ToString();

        sql = "select * from tablename where id= "+Session["did"].ToString();

        try
            {
                cmd.CommandText = sql;                

cmd.ExecuteNonQuery();trans.Commit();

        }

        catch(Exception ex)

        {

           

trans.Rollback();

        }

        if (ds != null & ds.Tables[0].Rows.Count > 0)

        {

            txtChangeUserName.Text = ds.Tables[0].Rows[0][1].ToString();

        }

    }

    protected void cmdChangePassword_Click(object sender, EventArgs e)

    {

        sql = "update tablename set password = '" + txtNewPassword.Text.Trim() + "' where Id=" + Session["did"].ToString();

        try
            {
                cmd.CommandText = sql;
                cmd.ExecuteNonQuery();

            lblMsg.Text = "Password Change successfully.";

  trans.Commit();

            }

            catch (Exception ex)

            {

                trans.Rollback();

            }

        }