Mini Shell

using System;
using System.Collections;
using System.Configuration;
using System.Data;
using System.Linq;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.HtmlControls;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Xml.Linq;
using System.Data.SqlClient;
public partial class admin_login : System.Web.UI.Page
{

    SqlConnection con = new SqlConnection(ConfigurationManager.ConnectionStrings["protarteConnectionString"].ConnectionString);

    protected void Page_Load(object sender, EventArgs e)
    {

    }

    protected void LinkButton2_Click(object sender, EventArgs e)
    {


        SqlCommand select = new SqlCommand("select * from util where nome='" + TextBox3.Text + "' and pass='" + TextBox1.Text + "'", con);
        SqlDataReader dr;

        try
        {
            con.Open();
            dr = select.ExecuteReader();
            if (dr.HasRows)
            {
                dr.Read();


                string lol1 = dr["nome"].ToString();
                string lol2 = dr["pass"].ToString();

                Session["permicao"] = dr["pass"].ToString();




                Response.Redirect("inicio.aspx");

            }

            else
            {

                ClientScript.RegisterStartupScript(this.GetType(), "msgbox", "alert('O Email o Pass estao incorrectos!');", true);


            }


        }
        catch (Exception ex)
        {
            Response.Write("erro ao ligar à base de dados porque:" + ex.Message);
        }
        con.Close();
    }
}