Comments by haisol (Top 3 by date)

I've typically used sql command query type of stored procedures and added parameters to it (not query type of text). I would change your query to a stored procedure, set the command type to procedure and use the cmd.Parameters.AddWithValue. Another quicker option would be to change your query to this: select * from ODetails where orderID= " + DropDownList1.SelectedValue.ToString() (pseudo code).

You probably do not need the DefaultButton on the pnl_BeneficaryDetails since it's on the outer panel (someOuterPanel)