sql

"SELECT * FROM Employee WHERE EmailAddress=".$_POST['email']."AND Password=".$_POST['password']." ";