Only allow users view own profile details

Question

protected void loadCandidate()
{
    con.Open();
    MySqlCommand cmd = new MySqlCommand("select * from voter where studentID =\'" + User.Identity.Name + &