$firstname = mysql_real_escape_string($_POST['firstname']); $lastname = mysql_real_escape_string($_POST['lastname']); $homepage = mysql_real_escape_string($_POST['homepage']); $msn = mysql_real_escape_string($_POST['msn']); $yahoo = mysql_real_escape_string($_POST['yahoo']); $aim = mysql_real_escape_string($_POST['aim']); $age = mysql_real_escape_string($_POST['age']); $location = mysql_real_escape_string($_POST['location']); $email = mysql_real_escape_string($_POST['email']); // $avatarpath = mysql_real_escape_string($_POST['avatarpath']); $profile_text = mysql_real_escape_string($_POST['profile_text']); $hw_connection = mysql_real_escape_string($_POST['hw_connection']); $hw_os = mysql_real_escape_string($_POST['hw_os']); $hw_monitor = mysql_real_escape_string($_POST['hw_monitor']); $hw_graphics_card = mysql_real_escape_string($_POST['hw_graphics_card']); $hw_motherboard = mysql_real_escape_string($_POST['hw_motherboard']); $hw_cpu = mysql_real_escape_string($_POST['hw_cpu']); $hw_memory = mysql_real_escape_string($_POST['hw_memory']); $hw_soundcard = mysql_real_escape_string($_POST['hw_soundcard']); $hw_storage = mysql_real_escape_string($_POST['hw_storage']); $db->Query("UPDATE gr_users SET firstname='$firstname',lastname='$lastname',homepage='$homepage',msn='$msn',yahoo='$yahoo', aim='$aim',age='$age',location='$location',email='$email',profile_text='$profile_text',hw_connection='$hw_connection', hw_os='$hw_os',hw_monitor='$hw_monitor',hw_graphics_card='$hw_graphics_card',hw_motherboard='$hw_motherboard',hw_cpu='$hw_cpu', hw_memory='$hw_memory',hw_soundcard='$hw_soundcard',hw_storage='$hw_storage' WHERE user_id='".$_SESSION['user_id']."'"); echo "
Your profile is now updated.