Admin Sign in page

using System.Linq;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.HtmlControls;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Xml.Linq;
using System.Data.SqlClient;
public partial class Admin : System.Web.UI.Page
{
SqlConnection mycon = new SqlConnection("server=.;database=ccsit;uid=sa;pwd=sa");
SqlCommand cmd = new SqlCommand();
protected void Page_Load(object sender, EventArgs e)
{
mycon.Open();
cmd.Connection = mycon;
}


protected void Button1_Click(object sender, EventArgs e)
{
cmd.CommandText = "select count (*) from admin where adname='" + TextBox1.Text + "' and pwd='"+TextBox2 .Text +"'";
int i = (int)cmd.ExecuteScalar();
if (i == 1)
{
Session["uname"] = TextBox1.Text;
Response.Redirect("DATA VIEW.aspx");
}
else
{
//cmd.CommandText = "insert into admin values ('" + TextBox1.Text + "','" + TextBox2.Text + "')";
Response.Write ("");
TextBox1.Text = "";
}
}
}