ASP .Net GridView Editing

<asp:GridView ID="GridView1" runat="server" AutoGenerateColumns="False" OnRowCancelingEdit="GridView1_RowCancelingEdit" OnRowDeleting="GridView1_RowDeleting" OnRowEditing="GridView1_RowEditing" OnRowUpdating="GridView1_RowUpdating">
    <Columns>
         <asp:BoundField DataField="Contactid" HeaderText="CId" ReadOnly="True" />
         <asp:BoundField DataField="contactname" HeaderText="name" />
         <asp:BoundField DataField="Phone" HeaderText="Phone" />
         <asp:CommandField ShowEditButton="True" />
         <asp:CommandField ShowDeleteButton="True" />
    </Columns>
</asp:GridView>

using System.Configuration;
using System.Data;

public partial class _Default : System.Web.UI.Page
{
    SqlConnection cnn = null;

    protected void Page_Load(object sender, EventArgs e)
    
    {
        if (!IsPostBack)
        {
            GetData();
        }
    }

    private void GetData()
    {
        using (cnn = new SqlConnection(ConfigurationManager.AppSettings.Get("Cnn")))
        {

            SqlDataAdapter da = new SqlDataAdapter("select ContactId, ContactName, Phone from Contacts", cnn);
            DataSet ds = new DataSet();
            da.Fill(ds, "Co");
            GridView1.DataSource = ds.Tables["Co"];
            DataBind();
        }
    } 
    
    protected void GridView1_RowEditing(object sender, GridViewEditEventArgs e)
    {
        GridView1.EditIndex = e.NewEditIndex;
        GetData();

    }
    protected void GridView1_RowUpdating(object sender, GridViewUpdateEventArgs e)
    {
        using (cnn = new SqlConnection(ConfigurationManager.AppSettings.Get("Cnn")))
        {
            cnn.Open();
            string id = GridView1.Rows[e.RowIndex].Cells[0].Text;
            string name = ((TextBox)GridView1.Rows[e.RowIndex].Cells[1].Controls[0]).Text;
            string phone = ((TextBox)GridView1.Rows[e.RowIndex].Cells[2].Controls[0]).Text;
            string strSql = "update Contacts set ContactName = '" + name + "', phone = '" +
                phone + "' where ContactId = " + id;

            SqlCommand cmd = new SqlCommand(strSql, cnn);
            cmd.ExecuteNonQuery();
            GridView1.EditIndex = -1;
            GetData();
        }

    }
    protected void GridView1_RowCancelingEdit(object sender, GridViewCancelEditEventArgs e)
    {
        GridView1.EditIndex = -1;
        GetData();
    }
}