reset password with link sent to email id

i have a page where if the user has forgotten their password they type in their email addr and if they are on the database they will be sent a link to the reset password page so they can enter their new password. firstly i generate a new guid and update my user table with it when user clicks on forgot password ,my problem is that the table is not being updated with new guid (i ran the query on sql and it worked) , the user receives the link via email to reset password but the password does not get reset. not sure what im missing

 

here is the code for both pages:

Forgot page 

";  

  

                System.Net.Mail.MailMessage message = new System.Net.Mail.MailMessage();  

                //message.To.Add(emailTo);  

                //message.Subject = subject;  

                message.From = new System.Net.Mail.MailAddress(emailFrom);  

                message.IsBodyHtml = true;  

                message.Body = body;  

                message.Priority = System.Net.Mail.MailPriority.High;  

                message.Subject = "Password Reset";  

  

                message.From = new System.Net.Mail.MailAddress(emailFrom);  

  

  

                SmtpClient SmtpMail = new SmtpClient();  

                SmtpMail.EnableSsl = true;  

                SmtpMail.Port = 25;  

                SmtpMail.Host = "myhost";  

             

                System.Net.ServicePointManager.ServerCertificateValidationCallback = delegate(object s,  

                          System.Security.Cryptography.X509Certificates.X509Certificate certificate,  

                          System.Security.Cryptography.X509Certificates.X509Chain chain,  

                          System.Net.Security.SslPolicyErrors sslPolicyErrors)  

                {  

                    return true;  

                };  

  

                // compare session username to username in database  

                SqlCommand command = new SqlCommand(@"SELECT Email FROM [Register] WHERE @email = [Email]");  

                command.Parameters.AddWithValue("@email", txtEmailP.Text);  

  

                using (SqlConnection connection =  

                           new SqlConnection(strConnString))  

                {  

  

                    connection.Open();  

  

                    command.Connection = connection;  

  

                    SqlDataReader reader = command.ExecuteReader();  

  

                    // Call Read before accessing data.  

                    while (reader.Read())  

                    {  

  

                        var to = new MailAddress(reader["Email"].ToString());  

                        message.To.Add(to);  

  

                    }  

  

                    // Passing values to smtp object          

                    SmtpMail.Send(message);  

  

  

  

    

                    ScriptManager.RegisterStartupScript(this, this.GetType(), "redirect", "alert('request submitted.an email will be sent to you'); window.location='" + Request.ApplicationPath + "index.aspx';", true);  

              ;  

  

                    // Call Close when done reading.  

                    reader.Close();  

                }  

  

  

  

            }  

  

                  

  

            catch (Exception ex)  

            {  

                throw ex;  

            }  

  

  

        }  

                  

            }  

  

      

    protected void Button1_Click(object sender, EventArgs e)  

    {  

  

        //this.forgot();  

        this.forgotpassword();  

    }  

}