Dim con As SqlConnection
con = New SqlConnection(\"server=chinna; uid=sa; pwd=136018@h; database=icms\")
con.Open()
Dim cmd As SqlCommand
Use ExecuteScalar instead of ExecuteReader
.
Dim password As String
password = cmd.ExecuteScalar.ToString()
FYI, storing passwords in plain text and comparing like this is VERY bad practice. You should be encrypting the passwords with some one-way salted encryption and then doing the same on verification then comparing the encrypted values.