Login Security ASP.Net

<%@ Page Language="VB" %>



    Untitled Page


    
    

        
            
                
                    
                        
                            
                                
                                    
                                        Change Your Password
                                
                                
                                    
                                                                                     ID="CurrentPasswordLabel" 
                                             runat="server" 
                                             AssociatedControlID="CurrentPassword">Password:
                                    
                                                                                     ID="CurrentPassword" 
                                             runat="server" 
                                             TextMode="Password">
                                                                                     ID="CurrentPasswordRequired" 
                                             runat="server" 
                                             ControlToValidate="CurrentPassword"
                                             ErrorMessage="Password is required." 
                                             ToolTip="Password is required." 
                                             ValidationGroup="ChangePassword1">*
                                    
                                
                                
                                    
                                                                                     ID="NewPasswordLabel" 
                                             runat="server" 
                                             AssociatedControlID="NewPassword">New Password:
                                    
                                                                                     ID="NewPassword" 
                                             runat="server" 
                                             TextMode="Password">
                                                                                     ID="NewPasswordRequired" 
                                             runat="server" 
                                             ControlToValidate="NewPassword"
                                             ErrorMessage="New Password is required." 
                                             ToolTip="New Password is required."
                                             ValidationGroup="ChangePassword1">*
                                                                                     ID="RegularExpressionValidator1" 
                                             runat="server" 
                                             ControlToValidate="NewPassword"
                                             ErrorMessage="Must have at least 1 number, 1 special character, and more than 6 characters."
                                             ValidationExpression="(?=^.{6,}$)(?=.*\d)(?=.*\W+)(?![.\n]).*$">*
                                
                                
                                    
                                                                                     ID="ConfirmNewPasswordLabel" 
                                             runat="server" 
                                             AssociatedControlID="ConfirmNewPassword">Confirm New Password:
                                    
                                                                                     ID="ConfirmNewPassword" 
                                             runat="server" 
                                             TextMode="Password">
                                                                                     ID="ConfirmNewPasswordRequired" 
                                             runat="server" 
                                             ControlToValidate="ConfirmNewPassword"
                                             ErrorMessage="Confirm New Password is required." 
                                             ToolTip="Confirm New Password is required."
                                             ValidationGroup="ChangePassword1">*
                                    
                                
                                
                                    
                                                                                     ID="NewPasswordCompare" 
                                             runat="server" 
                                             ControlToCompare="NewPassword"
                                             ControlToValidate="ConfirmNewPassword" 
                                             Display="Dynamic" 
                                             ErrorMessage="The Confirm New Password must match the New Password entry."
                                             ValidationGroup="ChangePassword1">
                                    
                                
                                
                                    
                                                                                     ID="FailureText" 
                                             runat="server" 
                                             EnableViewState="False">
                                    
                                
                                
                                    
                                                                                     ID="ChangePasswordPushButton" 
                                             runat="server" 
                                             CommandName="ChangePassword"
                                             Text="Change Password" 
                                             ValidationGroup="ChangePassword1" />
                                    
                                    
                                                                                     ID="CancelPushButton" 
                                             runat="server" 
                                             CausesValidation="False" 
                                             CommandName="Cancel"
                                             Text="Cancel" />