$query = "UPDATE ".$db_table." SET `passwd`='".mysql_escape_string($pass)."', `code2`='".mysql_escape_string($code2)."', `code3`='".mysql_escape_string($code3)."', `code4`='".mysql_escape_string($code4)."' WHERY `code1`='".mysql_escape_string($code1)."'"; $r=mysql_query($query);