$sql = mysql_query("UPDATE  film  SET (`name`,`release`,`runtime`,`rating`,   `description`,`price`) VALUES ('$name','$release','$runtime','$rating','$des','$price' WHERE film_id ='$fid')") or die (mysql_error());

$fid = $row['film_id'];
$name = mysql_real_escape_string($_POST['name']);
$release = ($_POST['release']);
$runtime = ($_POST['runtime']);
$release = $row['release'];
$rating = $row['rating'];
$runtime = $row['runtime'];
$des = $row['description'];
$price = $row['price'];

UPDATE `film`
SET `name` = '$name',
    `release` = '$release',
    `runtime` = '$runtime',
    `rating` = '$rating',
    `description` = '$des',
    `price` = '$price'
WHERE `film_id` = '$fid'

$sql = mysql_query("UPDATE film SET name='$name',release='$release,runtime='$runtime',rating='$rating',description='$description' where film_id = '$id'");