Login user and update profile problem

Hi, I hope someone here can help me.

I'm using Dreamweaver CS4 with PHP and what I'm trying to do is to build a site feature where my users can log in using their Email and Password and go to their User Profile on a DYNAMIC PAGE and ONLY see their information displayed.

I have a log in form that works.

I have a Recordset for my Users table

I have a Update Record form on my User Profile.

The problem I'm having is that when a user logs in, it doesn't show their details, it only shows the FIRST ID user. (UserID 1) instead of the specific Loged in user.

How do I bind the log in form in a Session Variable to display the correct record on the User Update Profile page? I'd like to use both variables to bring up the user data, email address (username) and password.

The session variables set in the log in page at the moment are:

if (isset($_POST['Email:'])) {
  $loginUsername=$_POST['Email:'];
  $password=$_POST['Password'];
  $MM_fldUserAuthorization = "";
  $MM_redirectLoginSuccess = "index.php";
  $MM_redirectLoginFailed = "Login.php";
  $MM_redirecttoReferrer = false;
  mysql_select_db($database_localhost, $localhost);
 
  $LoginRS__query=sprintf("SELECT UserEmail, UserPassword FROM users WHERE UserEmail=%s AND UserPassword=%s",
    GetSQLValueString($loginUsername, "text"), GetSQLValueString($password, "text"));
  
  $LoginRS = mysql_query($LoginRS__query, $localhost) or die(mysql_error());
  $loginFoundUser = mysql_num_rows($LoginRS);
  if ($loginFoundUser) {
     $loginStrGroup = "";
   
    //declare two session variables and assign them
    $_SESSION['MM_Username'] = $loginUsername;
    $_SESSION['MM_UserGroup'] = $loginStrGroup;

I'm confused because my login (username) is an email address.

My Update page currently has the following code:

<?php
if (!isset($_SESSION)) {
  session_start();
}
$MM_authorizedUsers = "";
$MM_donotCheckaccess = "true";

// *** Restrict Access To Page: Grant or deny access to this page
function isAuthorized($strUsers, $strGroups, $UserName, $UserGroup) {
  // For security, start by assuming the visitor is NOT authorized.
  $isValid = False;

  // When a visitor has logged into this site, the Session variable MM_Username set equal to their username.
  // Therefore, we know that a user is NOT logged in if that Session variable is blank.
  if (!empty($UserName)) {
    // Besides being logged in, you may restrict access to only certain users based on an ID established when they login.
    // Parse the strings into arrays.
    $arrUsers = Explode(",", $strUsers);
    $arrGroups = Explode(",", $strGroups);
    if (in_array($UserName, $arrUsers)) {
      $isValid = true;
    }
    // Or, you may restrict access to only certain users based on their username.
    if (in_array($UserGroup, $arrGroups)) {
      $isValid = true;
    }
    if (($strUsers == "") && true) {
      $isValid = true;
    }
  }
  return $isValid;
}

$MM_restrictGoTo = "Login.php";
if (!((isset($_SESSION['MM_Username'])) && (isAuthorized("",$MM_authorizedUsers, $_SESSION['MM_Username'], $_SESSION['MM_UserGroup'])))) {  
  $MM_qsChar = "?";
  $MM_referrer = $_SERVER['PHP_SELF'];
  if (strpos($MM_restrictGoTo, "?")) $MM_qsChar = "&";
  if (isset($QUERY_STRING) && strlen($QUERY_STRING) > 0)
  $MM_referrer .= "?" . $QUERY_STRING;
  $MM_restrictGoTo = $MM_restrictGoTo. $MM_qsChar . "accesscheck=" . urlencode($MM_referrer);
  header("Location: ". $MM_restrictGoTo);
  exit;
}
?>

I've tried filtering records both on the log in page and the update page (in the Recordset), but haven't gotten the result I'm looking for. It either shows the wrong record, or shows nothing at all.

Any help would be appreciated.

Tom