cookies in asp.net c#

int flag = 0;
       
           SqlCommand com = new SqlCommand("select * from login", con);    
      
            SqlDataReader dtr;
            dtr = com.ExecuteReader();
            while (dtr.Read())
            {
                              
                if(dtr[0].ToString().Equals(TextBox1.Text) && dtr[1].ToString().Equals(TextBox2.Text))
                {
                    flag = 1;
                    break;
                }
            }
            if (flag == 1)
            {
                HttpCookie uname = new HttpCookie("username");
              
                HttpCookie rights = new HttpCookie("rights");               
                uname.Value = TextBox1.Text;
           
                rights.Value = dtr[2].ToString();
                Response.Cookies.Add(uname);
        
                Response.Cookies.Add(rights);
                Response.Redirect("default.aspx");                    
            }