Select Value from the Database

cn.Open();

cmd = new SqlCommand("Select * from Student_Recode where EmailID='" + hdnEmail.Value + "'", cn);

dr = cmd.ExecuteReader();

if (dr.HasRows == true)

{

       dr.Read();

       lblname.Text = dr["AluminiName"].ToString()
}

cn.Close();