<?php $sql = “UPDATE users SET name=’.mysql_real_escape_string($name).’ WHERE id=’.mysql_real_escape_string ($id).’”; mysql_query($sql); ?>