// insert into the db. $_POST['website'] = $addslashes($_POST['website']); $_POST['first_name'] = $addslashes($_POST['first_name']); $_POST['second_name']= $addslashes($_POST['second_name']); $_POST['last_name'] = $addslashes($_POST['last_name']); $_POST['address'] = $addslashes($_POST['address']); $_POST['postal'] = $addslashes($_POST['postal']); $_POST['city'] = $addslashes($_POST['city']); $_POST['province'] = $addslashes($_POST['province']); $_POST['country'] = $addslashes($_POST['country']); $_POST['phone'] = $addslashes($_POST['phone']); $sql = "UPDATE ".TABLE_PREFIX."members SET website='$_POST[website]', first_name='$_POST[first_name]', second_name='$_POST[second_name]', last_name='$_POST[last_name]', dob='$dob', gender='$_POST[gender]', address='$_POST[address]', postal='$_POST[postal]', city='$_POST[city]', province='$_POST[province]', country='$_POST[country]', phone='$_POST[phone]', language='$_SESSION[lang]', private_email=$_POST[private_email], creation_date=creation_date, last_login=last_login WHERE member_id=$_SESSION[member_id]";