.NET C# SQL Server Arama İşlemi

    private void KullaniciBilgileri()
    {
        SqlCommand KullaniciBilgBul = new SqlCommand("SELECT * FROM DEFaaliyetPersonel WHERE DEKullanici='" + Session["Personel"].ToString() + "'", serkan);
        SqlDataReader objDataReader = null;
        serkan.Open();
        objDataReader = KullaniciBilgBul.ExecuteReader();
        while (objDataReader.Read() == true)
        {
            Label10.Text = objDataReader["Alan01"].ToString();
            Label11.Text = objDataReader["Alan02"].ToString();

        }
        objDataReader.Close();
        serkan.Close();
    }