ASP.NET

{
    [
        {
            "name": "chris",
            "ic": "111111-11-1111",
            "phone": "011-1111111",
            "address": "street 01",
            "gender": "male"
        },
        {
            "name": "carolyn",
            "ic": "222222-22-2222",
            "phone": "012-2222222",
            "address": "street 02",
            "gender": "female"
        }
    ]
}

public class Person
{
    public string name { get; set; }
    public string ic { get; set; }
    public string address { get; set; }
    public string gender { get; set; }
}

List<Person> obj = JsonConvert.DeserializeObject<List<Person>>( ... );

in order to reset password you have to give email link or else you can give direct web page link. before reset password. you should take email address from the user. so you can use in where clause. see my code:

      protected void save_Click(object sender, EventArgs e)
    {
        if (password.Text != "" || confirmpassword.Text != "")
        {
            if (password.Text == confirmpassword.Text)
            {
                con.Open();
                SqlCommand cmd = new SqlCommand("update login set password='" + password.Text + "', confirmpassword='" + confirmpassword.Text + "' where email='" + Session["email"] + "'", con);
                cmd.ExecuteNonQuery();
                con.Close();
                Label1.Text = "Password Reset Successfully";
                HtmlMeta meta = new HtmlMeta();
                meta.HttpEquiv = "Refresh";
                meta.Content = "5;url=loginuser.aspx";
                this.Page.Controls.Add(meta);
            }
            else
                Label1.Text = "Password not Matched";
        }
        else
            Label1.Text="Please Enter Password";
    }
 

ask email or username. then display password reset webpage. use email or username in where clause to update password.

if you want id then use sql query like 

select id from userDetails where email=session["email"];

i hope you will understand.

yes you are right Richard.

always use parameterized query. i used this code for my college project. so i wrote like this. my suggestion also go with parameterized query to protect from sql injection.