codigo update

<?php
    // Lampirkan db dan User
    require_once "db.php";
    require_once "User.php";

    // Buat object user
    $user = new User($db);

    // Jika belum login
    if(!$user->isLoggedIn()){
        header("location: login.php"); //Redirect ke halaman login
    }

    // Ambil data user saat ini
    $currentUser = $user->getUser();

 ?>

<?php
if(isset($_POST['update']))
{
// resgata os valores do formulário
$nama = isset($_POST['nama']) ? $_POST['nama'] : null;
$email = isset($_POST['email']) ? $_POST['email'] : null;
$password = isset($_POST['password']) ? $_POST['password'] : null;
$thumbnail_login = isset($_POST['thumbnail_login']) ? $_POST['thumbnail_login'] : null;
$id = isset($_POST['id']) ? $_POST['id'] : null;

// validação (bem simples, mais uma vez)
if (empty($nama))
{
    echo "Volte e preencha todos os campos";
    exit;
}

// atualiza o banco
$db = db_connect();
$query = "UPDATE tblogin SET nama=:nama, email=:email, password=:password, thumbnail_login=:thumbnail_login  WHERE id = :id'";
$db = $db->prepare($query);
$query->bindParam(':nama', $nama);
$query->bindParam(':email', $email);
$query->bindParam(':password', $password);
$query->bindParam(':thumbnail_login', $thumbnail_login);
$query->bindParam(':id', $id);

if ($query->execute())
{
    header('Location: index.php');
}
else
{
    echo "Erro ao alterar";
    print_r($query->errorInfo());
}
}
?>