ขอความช่วยเหลือ เกี่ยวกับการ login เรียกดูข้อมูลการออกเช็คซึ่ง login นึงสามารถดูเช็คได้หลายรายการ

<?
	session_start();
	include("connect.php");
	$idcradnumber	= $_POST['idcradnumber'];
	$password	= $_POST['password'];
	$pmtdate	= $_POST['pmtdate'];
	
	$sql 	= "select * from vendor where idcradnumber='$idcradnumber' and password='$password'";
	$query 	= mysql_query($sql) or die("error=$sql");
	$num	= mysql_num_rows($query);
	
	if($num==0)
	{
		echo "<script>alert('àÅ¢·Õè»ÃШӵÑǼÙéàÊÕÂÀÒÉÕ ËÃ×Í ÃËÑʼèÒ¹ äÁè¶Ù¡µéͧ !!');history.back();</script>";
		exit();
	}else
	{
		$_SESSION['idcradnumber'] = $idcradnumber;
		echo "<script>location='uploadshow.php';</script>";
		exit();
	}
?>

code show
<form name="frmEdit" method="post">
  <p>
</p>
  <p>&nbsp;</p>
  <p><span class="style17">Welcome [IDCRADNUMBER : 
    <?=$_SESSION['idcradnumber']?>
    ]</span><br>
    <br>
  </p>
  <p align="center" class="style6 style10">รายการชำระหนี้การค้า</p>
  <p align="center" class="style6 style10">&nbsp;</p>
  <table width="1053" border="1" align="center">
    <tr bgcolor="#777777">
      <td width="35" height="49"><div align="center" class="style13"><strong><span class="style4">ID</span></strong></div></td>
      <td width="92"><div align="center" class="style28"><span class="style4">PAY.VOUCHER</span></div></td>
      <td width="88"><div align="center" class="style28"><span class="style4">VENDOR CODE</span></div></td>
      <td width="206"><div align="center" class="style28"><span class="style4">VENDOR NAME</span></div></td>
      <td width="64"><div align="center" class="style28"><span class="style4">CHEQUE NO.</span></div></td>
      <td width="72"><div align="center" class="style28"><span class="style4">PMT.DATE</span></div></td>
      <td width="111"><div align="center" class="style28"><span class="style4">TRANSFERAMOUT</span></div></td>
      <td width="117"><div align="center" class="style28"><span class="style4">WITHOLDINGTAX</span></div></td>
      <td width="100"><div align="center" class="style28"><span class="style4">ACCNUMBER</span></div></td>
      <td width="104"><div align="center" class="style28"><span class="style4">BANKNAME</span></div></td>
    </tr>
  <?php while ($row = mysql_fetch_array($query)){ ?>
    <tr bgcolor="#FFFFFF">
      <td height="71"><div align="center" class="style18"><span class="style13">
        <?=$row["id"];?>
      </span></div></td>
      <td><div align="center" class="style18"><span class="style13">
        <?=$row["payvoucher"];?>
      </span></div></td>
      <td><div align="center" class="style18"><span class="style13">
        <?=$row["vendorcode"];?>
      </span></div></td>
      <td><div align="center" class="style18"><span class="style13">
        <?=$row["vendorname"];?>
      </span></div></td>
      <td><div align="center" class="style18"><span class="style13">
        <?=$row["chequeno"];?>
      </span></div></td>
      <td><div align="center" class="style18"><span class="style13">
        <?=$row["pmtdate"];?>
      </span></div></td>
      <td><div align="center" class="style18"><span class="style13">
        <?=$row["transferamout"];?>
      </span></div></td>
      <td><div align="center" class="style18"><span class="style13">
        <?=$row["witholdingtax"];?>
      </span></div></td>
      <td><div align="center" class="style18"><span class="style13">
        <?=$row["accnumber"];?>
      </span></div></td>
      <td><div align="center" class="style18"><span class="style13">
        <?=$row["bankname"];?>
      </span></div></td>
    </tr>
  <?php } ?>
  </table>
</form>

$sql    = "select * from vendor where idcradnumber='$idcradnumber' and password='$password'";