Login Security ASP.Net

<%@ Page Language="VB" %>
<%@ Import Namespace="System.Data" %>
<%@ Import Namespace="System.Web.Security" %>


Registration Page

   Sub Register_Click(Sender As Object, e As EventArgs)
      If Page.IsValid Then
         Dim LoginDS as New DataSet()
         LoginDS.ReadXml(Server.MapPath("Users.xml"))
         If LoginDS.Tables(0).Select("Email='" & Email.text & "'").Length = 0 Then
            Dim NewUser As DataRow
            NewUser = LoginDS.Tables(0).NewRow()
            NewUser("Email") = Email.Text
            NewUser("Password") = FormsAuthentication.HashPasswordForStoringInConfigFile(Password.Text, "SHA1")
            LoginDS.Tables(0).Rows.Add(NewUser)
            LoginDS.WriteXml(Server.MapPath("Users.xml"))
            Response.Redirect(Request.QueryString("Page"))
         Else
            Message.Text = "User with email: " & Email.Text & " already exists. Please choose another email address."
         End If
      End If
   End Sub



   
      
         
            Email: 
            
         
         
            Desired Password: 
            
         
         
            Confirm Password: 
            
         
         
            
            
         
      
               controltovalidate="Password" 
         controltocompare="PasswordConfirm"
         display="dynamic"
         text="Passwords must match!"
         operator="Equal"
         runat="server"/>
               controltovalidate="Email" 
         display="dynamic"
         text="Email address required!"
         runat="server"/>
               controltovalidate="Password" 
         display="dynamic"
         text="Password required!"
         runat="server"/>
      
   


file: Users.xml


  
    a@asp.com
    816010E041FA485C6E2383C649343D3A0CAD4D25