ASP.NET

public void populatepage()
    {
        string s = Page.User.Identity.Name;
        string str = "Select * From Company Where(Owner='s')";
        SqlCommand cmd = new SqlCommand(str, conn);
        SqlDataReader dr = null;
        conn.Open();
        dr = cmd.ExecuteReader();
        while (dr.Read())
        {
            txtcompname.Text = dr["CompanyName"].ToString();
            txtcompaddress.Text = dr["CompanyAddress"].ToString();
            txtmail.Text = dr["Email"].ToString();
            txtphoneno.Text = dr["PhoneNo"].ToString();
            txtpincode.Text = dr["PinCode"].ToString();
            //txtcompid.Text=dr["CompanyId"].ToString();
            Button1.Visible = false;
            Label1.Visible = true;
            Label1.Text = "You have already created your company";
            txtcompaddress.ReadOnly = true;
            txtcompid.ReadOnly = true;
            txtcompname.ReadOnly = true;
            txtmail.ReadOnly = true;
            txtphoneno.ReadOnly = true;
            txtpincode.ReadOnly = true;

        }
        conn.Close();
    }

select * from Student where name=@name OR birthday BETWEEN (@lower) AND (@upper)