lمشكلة فى تعديل بيانات العميل

عملت صفحة لتخديث بيانات العميل خيث يمكنه من الاطلاع على بيانته وتعديلها بعد تسجيل الدخول

الرجاء مساعدتى لمعرفة مكان الخطأ

  	<?php
session_start();

if(isset($_SESSION['TAOS'])){
	//Change Password changepass.php
	$username = $_SESSION ['TAOS'];
//Getting data from input tags

$submit1 = mysql_real_escape_string($_POST['submit']);
$firstname1 = mysql_real_escape_string($_POST['firstname']);
$lastname1 = mysql_real_escape_string($_POST['lastname']);
$companyname1 = mysql_real_escape_string($_POST['companyname']);
$address1 = mysql_real_escape_string($_POST['address']);
$city1 = mysql_real_escape_string($_POST['city']);
$state1 = mysql_real_escape_string($_POST['state']);
$country1 = mysql_real_escape_string($_POST['country']);
$phone1 = mysql_real_escape_string($_POST['phone']);
$mobile1 = mysql_real_escape_string($_POST['mobile']);
$Skype1 = mysql_real_escape_string($_POST['Skype']);
$Twitter1 = mysql_real_escape_string($_POST['Twitter']);
$Facebook1 = mysql_real_escape_string($_POST['Facebook']);
$date = date("M d, Y");
$userip = $_SERVER['REMOTE_ADDR']; 

//Clearing data
	$submit = strip_tags($submit1);
	$firstname = strip_tags($firstname1);
	$lastname = strip_tags($lastname1);
	$companyname = strip_tags($companyname1);
	$address = strip_tags($address1);
	$city = strip_tags($city1);
	$state = strip_tags($state1);
	$country = strip_tags($country1);
	$phone = strip_tags($phone1);
	$mobile = strip_tags($mobile1);
	$Skype = strip_tags($Skype1);
	$Twitter = strip_tags($Twitter1);
	$Facebook = strip_tags($Facebook1);





$sql ="SELECT * FROM users 
   	WHERE email ='$username'";
   	$query=mysql_query($sql);
   	if ($query)
    	$row = mysql_fetch_assoc($query);
//DB Data

	$DBfirstname = $row['firstname'];
	$DBlastname = $row['lastname'];
	$DBcompanyname = $row['companyname'];
	$DBaddress = $row['address'];
	$DBcity = $row['city'];
	$DBstate = $row['state'];
	$DBcountry = $row['country'];
	$DBphone = $row['phone'];
	$DBmobile = $row['mobile'];
	$DBSkype = $row['Skype'];
	$DBTwitter = $row['Twitter'];
	$DBFacebook = $row['Facebook'];
// Check data
if ($submit){


//Connect to DB
   include 'includes/connection.php'; 


//Insirt data

$sql = "UPDATE users SET 
   (
 id ,
firstname ,
lastname ,
companyname ,
address ,
city ,
state ,
country ,
phone ,
mobile ,
email ,
Skype ,
Twitter ,
Facebook ,
password ,
notes ,
lastlogin ,
ip ,
host ,
status ,
language ,
creatdate ,
credit ,
billingcid ,
groupid )
 VALUES (
 '', 
 '$firstname', 
 '$lastname', 
 '$companyname', 
 '$address', 
 '$city', 
 '$state', 
 '$country', 
 '$phone', 
 '$mobile', 
 '', 
 '$Skype', 
 '$Twitter', 
 '$Facebook', 
 '',
 '' ,
 '', 
 '$userip',
 '' ,
 '' ,
 '', 
 '$date', 
 '', 
 '', 
 ''

 ) 
  WHERE email
  ='$username' 
   ";
}
$query = mysql_query($sql);
if($query){
echo "<form><h5>Updated successfully</h5></form>";
}



//  echo data


echo "
<html>
<head>
 <link rel='stylesheet' type='text/css' href='css/formulaire.css' media='screen' title='bbxcss' />
 <style type='text/css'></style>
</head>
<body>
<form method='post' action='update.php'>
<table>
	<tr>
    	<td>
    	<label id='firstname'>Firstname</label>
    	</td>
    	<td>
    	<input name='firstname' type='text' value='$DBfirstname'/>
    	</td>
	</tr>

	<tr>
    	<td>
    	<label id='lastname'>Lastname</label>

    	</td>
    	<td>
    	<input name='lastname' type='text' value='$DBlastname'/>
    	</td>
	</tr>

	<tr>
    	<td>
    	<label id='companyname'>Company</label>
    	</td>
    	<td>
    	<input name='companyname' type='text' value='$DBcompanyname'/>
    	</td>
	</tr>

	<tr>
    	<td>
    	<label id='address'>Address</label>
    	</td>
    	<td>
    	<input name='address' type='text' value='$DBaddress'/>
    	</td>
	</tr>

	<tr>
    	<td>
    	<label id='city'>City</label>
    	</td>
    	<td>
    	<input name='city' type='text' value='$DBcity'/>
    	</td>
	</tr>

	<tr>
    	<td>
    	<label id='state'>State</label>
    	</td>
    	<td>
    	<input name='state' type='text' value='$DBstate'/>
    	</td>
	</tr>

	<tr>
    	<td>
    	<label id='country'>Country</label>
    	</td>
    	<td>
    	<input name='country' type='text' value='$DBcountry'/>
    	</td>
	</tr>

	<tr>
    	<td>
    	<label id='phone'>Phone</label>
    	</td>
    	<td>
    	<input name='phone' type='text' value='$DBphone'/>
    	</td>
	</tr>

	<tr>
    	<td>
    	<label id='mobile'>Mobile</label>
    	</td>
    	<td>
    	<input name='mobile' type='text' value='$DBmobile'/>
    	</td>
	</tr>


	<tr>
    	<td>
    	<label id='Skype'>Skype</label>
    	</td>
    	<td>
    	<input name='Skype' type='text' value='$DBSkype'/>
    	</td>
	</tr>

	<tr>
    	<td>
    	<label id='Twitter'>Twitter</label>
    	</td>
    	<td>
    	<input name='Twitter' type='text' value='$DBTwitter'/>
    	</td>
	</tr>

	<tr>
    	<td>
    	<label id='Facebook'>Facebook</label>
    	</td>
    	<td>
    	<input name='Facebook' type='text' value='$DBFacebook'/>
    	</td>
	</tr>



	<tr>
    	<td>
    	</td>
    	<td>
	</br>
    	<input name='submit' type='submit' value='Update' />
            	</td>
	</tr>

</table>
</form>

</body>
</html>

  ";  

}else{

	echo "
<html>
<head>
 <link rel='stylesheet' type='text/css' href='css/formulaire.css' media='screen' title='bbxcss' />
 <style type='text/css'></style>
</head>
<body>
<form>
<h4>You are not authorized to use this page, <a href='index.php'>please login</a> </h4>
</form>
</body>
</html>
  "; 


} 	
?>