Question

Please help me out here, im not sure what the actual error means but i am looking for any way to make this work! please!

    <?php 

//session_start();
include("config.php");
include("auth.php"); 

if($_SESSION['SESS_MEMBER_ID'] != 'true') {
//  header("location:member-index.php");
    }

//connects to database
$link = mysql_connect(DB_HOST, DB_USER, DB_PASSWORD);
if (!$link) {
    die("Failed to connect to server: " . mysql_error());
    }

    //selects database
$db = mysql_select_db(DB_DATABASE);
if (!$db) {
    die ("Unable to select database");
    }

this is where the error is

$qry = "UPDATE members set firstname="'.$firstname.'", lastname="'.$lastname.'", location="'.$location.'", email="'.$email.'", cell_number="'.$cell_number.'", home_number="'.$home_number.'", about="'.$about.'" where member_id="'.$_SESSION['SESS_MEMBER_ID'].'" "


$result = @mysql_query($qry);


?>

Answer 1

Change

$qry = "UPDATE members set firstname="'.$firstname.'", lastname="'.$lastname.'", location="'.$location.'", email="'.$email.'", cell_number="'.$cell_number.'", home_number="'.$home_number.'", about="'.$about.'" where member_id="'.$_SESSION['SESS_MEMBER_ID'].'" "

to

$qry = "UPDATE members set firstname='".$firstname."', lastname='".$lastname."', location='".$location."', email='".$email."', cell_number='".$cell_number."', home_number='".$home_number."', about='".$about."' where member_id='".$_SESSION['SESS_MEMBER_ID']."' ";

Note : It is highly recommended to use Prepared statements instead of using mysql_* functions.