if (isset($_POST['change']))
{
		$zapic = $_POST['change'];
		$zapic = htmlspecialchars($zapic);
		$zapic = $db->real_escape_string($zapic);
		$db->query("UPDATE `table` SET `zapic`='$zapic' WHERE `id`=$code");
}