Untitled

<?php
session_start();
	$emailAddress = $_POST['emailAddress'];
	$inputPassword = $_POST['password'];
	$host = "localhost";
	$database = "peterngu_cst8238";
	$username = "peterngu_account";
	$password = "44126841";
	if(isset($_POST['emailAddress'])&&isset($_POST['password']) && isset($_POST['submit'])){
	$dbConnection = mysql_connect($host, $username, $password);
	if(!$dbConnection){
		die("Unable to connect to database ". $host.mysql_connect_error($dbConnection));
	}
	mysql_select_db($database);
	$sql = "SELECT * FROM employee WHERE emailAddress ='$emailAddress' and password = '$inputPassword'";
	$query = mysql_query($sql);
	$queryResult = mysql_fetch_array($query);
	$loginEmail = $queryResult['emailAddress'];
	$loginPassword =$queryResult['password'];
	if($emailAddress == $loginEmail && $inputPassword == $loginPassword){
		$_SESSION['firstName'] = $queryResult['firstName'];
		$_SESSION['lastName'] = $queryResult['lastName'];
		$_SESSION['emailAddress'] = $queryResult['emailAddress'];
		$_SESSION['phoneNum'] = $queryResult['phoneNum'];
		$_SESSION['socialNumber'] = $queryResult['socialNumber'];
		$_SESSION['password'] = $queryResult['password'];
		header("Location:viewAllEmployees.php", true);
		exit();
	}
	else{
		$error = "Incorrect Login Information!";
		echo $error;
	}
	mysql_close($dbConnection);
}
?>
<?php
include 'header.php';
include 'menu.php';
?>
<html>
	</br>
	<h1><b>Login</b></h1>
	<form method="post">
	Email Address:
	<input type="text" name="emailAddress"/></br>
	Password:
	<input type="text" name="password"/><br/>
	<input type="submit"/>
	</form>
	</br>
	</br></br>
	</br></br>
	</br>
</html>
<?php
include 'footer.php';
?>