I am a newbie and I could be wrong, but I think I know what is wrong.
If you use hard quotes, you're looking for the literal string instead of its interpolation value. So instead of
$result = mysql_query("SELECT id,employee,pass,level,email,phone,theme FROM staffconfig WHERE employee='.$employee.'");
I would say
$result = mysql_query("SELECT id,employee,pass,level,email,phone,theme FROM staffconfig WHERE employee=$employee");
or
$result = mysql_query("SELECT id,employee,pass,level,email,phone,theme FROM staffconfig WHERE employee=\".$employee.\"");
BTW, do you really need those two concatenion dots surrounding the variable?
Good luck,
Luciano ES
Santos, SP - Brasil