ASP.NET

protected void Button1_Click(object sender, EventArgs e)
{

        SqlConnection con = new SqlConnection(ConfigurationManager.ConnectionStrings["newcon"].ConnectionString);
        SqlCommand cmd = new SqlCommand();
        cmd.Connection = con;

    //find out which feilds are not null, then make search on the basis of those feilds
    //Now the feilds which are not empty are:

        ArrayList arl = new ArrayList();
        if (TextBox1.Text.Trim() != "")
    {
        arl.Add("productid");
    }
        if (TextBox2.Text.Trim() != "")
    {
        arl.Add("sh_desc");
    }
        if (TextBox3.Text.Trim() != "")
    {
        arl.Add("weight");
    }
        if (TextBox4.Text.Trim() != "")
    {
        arl.Add("length");
    }
        if (TextBox5.Text.Trim() != "")
    {
        arl.Add("width");
    }
        if (TextBox6.Text.Trim() != "")
    {
        arl.Add("height");
    }

    //Now take out the items from the arraylist

    for (int i = 0; i <= arl.Count; i++ )
    {
        if (arl[i].ToString().StartsWith("productid"))
        {

        }
    }
    cmd.CommandText = "select sh_desc,productid,price from PRODUCTS where ";

        cmd.Connection.Open();

        dt = new DataTable();
        dt.Columns.Add("REF", typeof(string));
        dt.Columns.Add("Description", typeof(string));
        dt.Columns.Add("Price", typeof(float));
        SqlDataReader rdr = cmd.ExecuteReader();
        while (rdr.Read())
        {
            pr_id = (rdr["productid"]).ToString();
            testsh_desc = (rdr["sh_desc"]).ToString();
            test_price = Convert.ToSingle(rdr["price"]);

            DataRow myrow = dt.NewRow();

            myrow["REF"] = pr_id;
            myrow["Description"] = testsh_desc;
            myrow["Price"] = test_price;

            dt.Rows.Add(myrow);
            dt.AcceptChanges();
            Session["sear"] = dt;
        }

        if (testsh_desc != null)
        {
            Response.Redirect("~/Results.aspx");
        }
        else
        {
            Response.Redirect("~/ErrorResult.aspx");
        }
        cmd.Connection.Close();
}