<?PHP

                if(isset($_POST['update'])){
                $password = md5($_POST['password']);
                $passdata = mysql_query("SELECT * FROM users WHERE username='".$_SESSION['username']."' ");
                error("$password");
                    if(empty($_POST['firstname']) || empty($_POST['lastname'])) {
                        echo error("<br /><center><b>Моля, въведете валидни име и фамилия.</b></center>");
                    } elseif(mysql_num_rows($passdata) > 0){
                        echo error("<br /><center><b>Грешна парола.</b></center>");
                    }  else {
                    $firstname = protection($_POST['firstname']);
                    $lastname = protection($_POST['lastname']);
                    $info = protection($_POST['info']);
                    $userUP = mysql_query("UPDATE users SET firstname='$firstname', lastname='$lastname', info='$info' WHERE username='".$_SESSION['username']."'") or die(mysql_error());
                    echo success("sadface");
                    }
                }


                ?>