// PROFIl if ($_POST['postprofile'] == TRUE && checklogin()) { $currentuser = mysql_real_escape_string($currentuser); $website = mysql_real_escape_string($_POST['website']); $interests = mysql_real_escape_string($_POST['interests']); mysql_query("UPDATE db_users SET website='$website', interests='$interests' WHERE username='$currentuser'") or die(mysql_error()); header("profile.php"); }