Untitled

<?php
include("dbcon.php");
session_start();
if(!isset($_SESSION['user']) && empty($_SESSION['user']))
header("Location:login.php");
$sql = "SELECT * FROM dept";
$result=$con->query($sql);
?>
<?php
if(isset($_POST) && !empty($_POST)){
//echo  "<pre>" ;print_r($_POST);exit;
$name=$_POST['name'];
$deptid=$_POST['deptid'];
$sal=$_POST['sal'];

$sql="INSERT INTO emp(name,deptid,sal) VALUES('$name',$deptid,$sal)";
if($con->query($sql))
{
	echo "<h3>Employee Added.</h3>";
	echo "<a href='employees.php'>Back to List</a>";

}

else
{
	echo $con->error;
}
}

else{?>

<html>
<head>
<title>Add Employee: <?php echo $_SESSION['user']['name'];?></title>
</head>
<body>
<h2>Add Employee</h2>
<form name="addemp" action="<?php echo $_SERVER['PHP_SELF']?>" method="POST">
Name:<input type="text" name="name" ><br>
Department:<select name="deptid">
             <option value="">Select Department</option>
			 <?php while($row=$result->fetch_assoc())
			 { ?>
			 <option value="<?php echo $row['id']; ?>"><?php echo $row['name']; ?></option>
			 <?php } ?>
           </select><br>
Salary:<input type="number" name="sal"><br>
<input type="submit" value="Save"><br>
<input type="reset" value="Cancel"><br>
</form>


</body>
</html>
<?php  } ?>