MyAccount.aspx.cs

using System;
using System.Collections.Generic;
using System.Data.SqlClient;
using System.Linq;
using System.Web;
using System.Web.Configuration;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Data;

namespace TestGrounds
{
    public partial class MyAccount : System.Web.UI.Page
    {
        protected void Page_Load(object sender, EventArgs e)
        {

        }
        protected void btnGet_Click(object sender, EventArgs e)
        {
            string user = Session["user"].ToString();
            string sql = "SELECT * FROM Customer";
            SqlDataReader reader = FetchWriteData(sql);
            while (reader.Read())
            {
                if (user == reader["name"].ToString())
                {
                    txtName.Text = reader["name"].ToString();
                    txtPassword.Text = reader["password"].ToString();
                    txtAdress.Text = reader["adress"].ToString();
                }
            }
        }

        private SqlDataReader FetchWriteData(string sql)
        {
            SqlConnection conn = new SqlConnection();
            conn.ConnectionString = WebConfigurationManager.ConnectionStrings["MinConn"].ConnectionString;
            conn.Open();
            SqlCommand cmd = new SqlCommand(sql, conn);
            SqlDataReader reader = cmd.ExecuteReader();
            return reader;
        }

        protected void btnUpdate_Click(object sender, EventArgs e)
        {
            string sql = "UPDATE customer SET name = '" + txtName.Text + "', password = '" + txtPassword.Text + "', adress = '" + txtAdress.Text + "' WHERE name = '" + Session["user"].ToString() + "'";
            SqlDataReader reader = FetchWriteData(sql);
            lblError.Text = "Information updated.";
            Session["user"] = txtName.Text;
            //lblError.Text = sql;
        }
    }
}