login.php

//this is  my login page script
<?php
$con=mysqli_connect("localhost","root","","test");
if (mysqli_connect_errno())
  {
  echo "Failed to connect to MySQL: " . mysqli_connect_error();
  }else{
  }
if(isset($_POST["submit"])){

if(!empty($_POST['uemail']) && !empty($_POST['pass'])) {

    $email=mysqli_real_escape_string($con, $_POST['uemail']);
    $pass=$_POST['pass'];
    $query=mysqli_query($con,"SELECT * FROM login WHERE email='".$email."' AND password='".$pass."'");
    $numrows=mysqli_num_rows($query);
    if($numrows!=0)
    {
    while($row=mysqli_fetch_assoc($query))
    {
    $dbuseremail=$row['email'];
    $dbpassword=$row['password'];
    $dbfirstname=$row['firstname'];
    $dblastname=$row['lastname'];

    }

    if($email == $dbuseremail && $pass == $dbpassword)
    {
    session_start();
    $_SESSION['sess_user']=$dbfirstname;
    $_SESSION['sess_email']=$dbuseremail;
    $_SESSION['sess_luser']=$dblastnamename;
    $_SESSION['sess_gender']=$dbgender;

    /* Redirect browser */
    header("Location: home1.php");
    }
    } else {
    echo "Invalid Email or password!";
    }

} else {
    echo "<center>All fields are required!</center>";
}
}
mysqli_close($con);
?>
<html>
<head>
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>Login</title>

</head>
<body>
<div id="login_form">
<form action="" method="POST" autocomplete="off">
    <fieldset>
        <h3>Login Form</h3>

            Email:<br />  <input id="textdecor" type="email" name="uemail"placeholder="email@" size="35"> <br /><br />
            Password:<br />  <input id="textdecor" type="password" name="pass" placeholder="xcz5v5x " size="35"><br />  <br />
        <input type="submit"  id="sumbit_buttom"    value="Login" name="submit" />
        <p><a href="regis.php">Register</a> | <a href="log.php">Login</a></p>
    </fieldset>
</form>

</div>
</body>
</html>