SQL & PL/SQL

SELECT USERNAME,PASSWORD FROM EMPLOYEE WHERE USERNAME='"+userName(from GUI form)+"' AND PASSWORD='"+password(from GUI Form)+"'
ResultSet resultSet = DBHandle.getData(connection, query);
resultSet.first();
if(resultSet.getString(1).equals(userName)&&resultSet.getString(password).equals(password)){
return 1;
}else{
return 0;
}

when i run this query i got Invalid column Name error. But my database have these columns. But I got that following error.

Thanks in Advance!