problem with changepassword control

<ajax:TabPanel ID="tbpnlsetting" runat="server" >&lt;HeaderTemplate>

 Settings

    &lt;/HeaderTemplate>

    <ContentTemplate>



    <asp:Panel ID="settings" runat="server" Width="671px" Height="214px">

        <asp:ChangePassword ID="ChangePassword1" runat="server"
            onchangedpassword="ChangePassword1_ChangedPassword" PasswordLabelText="Current Password"">
        </asp:ChangePassword>

 </asp:Panel>


    </ContentTemplate>


</ajax:TabPanel>
</ajax:TabContainer></pre></pre>

protected void ChangePassword1_ChangedPassword(object sender, EventArgs e)
       {
           using (MySqlConnection con = new MySqlConnection(ConnectionString))
           {
               String query = "update  admin set Password ='" + ChangePassword1.ConfirmNewPassword + "' where  Password ='" + ChangePassword1.CurrentPassword + "'";
               MySqlCommand command = new MySqlCommand(query,con);
               con.Open();
               command.ExecuteNonQuery();
           }
       }