Updating Column In mysql Database

Question

I need some help with the code for updating the "Email" column in my database. the ID column is "UserID" and the Email column is "Email".

<form method="POST" action="Index.php" name="UpdateEmail"><div class="input-group">
 <?php
if(isset($_POST['submit'])){

    $Email = $_POST['Email'];
    $EmailID = $_POST['IDhiddenField'];

                mysql_query("UPDATE user SET UserID=$EmailID, Email=$Email WHERE UserID=$EmailID, Email=$Email");


?>      




<?php } ?>


  <input class="form-control" placeholder="Enter Email Address Here to Update" type="email" name="Email" required>
  <span class="input-group-btn">
    <button class="btn btn-default" type="submit">Update Email</button>
    <input name="IDhiddenField" type="hidden" id="IDhiddenField" value="<?php
$my_id = $_SESSION['user_id'];
$id = getuser($my_id, 'UserID'); 
echo "$id";
?>">
  </span>
</div>
  <input type="hidden" name="MM_update" value="UpdateEmail">

</form>

Answer 1

As they said, you should use PDO, here is a class you can use to do it : http://pastebin.com/bJcth8rz

You have to make a myPDO.include.php where you set the configuration of your database and include it on each page.

$statement = $myPDO::getInstance()->prepare(<<<SQL
    UPDATE user SET Email=:email WHERE UserID=:userID
SQL
);

$email = $_POST['Email'];

$statement->execute(array(":email" => $email,
                          ":userID" => getuser($_SESSION['user_id'],'UserID')));

This request will do what you want to BUT.

Be sure you start your session :

session_start();

When you use sessions, you will have access to it on other pages, you don't have to transfer it by your form with hidden input which can be manipulated by the users !

By the way, I don't understand why do you have an email_ID field, to my mind, your table should be composed by :

User
idUser (int)
Email (varchar)
...

But i can't get how an email id can be useful here