if (action.equals("infoUpdate")) {

            User user = (User) session.getAttribute("user");

            String fullName = request.getParameter("fullname");
            String userName = user.getUserName();
            String email = user.getEmail();
            String password = request.getParameter("password");
            String Cpassword = request.getParameter("Cpassword");
            String birthdate = request.getParameter("birthdate");
            String questionNo = request.getParameter("questionNo");
            String answer = request.getParameter("answer");

            user = new User(fullName, userName, email, password, birthdate, questionNo, answer);

            User userTest = UserDB.search(email);
            User userTest2 = UserDB.searchUserName(userName);
            if (fullName.isEmpty() || userName.isEmpty()
                    || email.isEmpty() || password.isEmpty() || birthdate.isEmpty() || answer.isEmpty()) {
                message = "please fill out all the fields";
                session.setAttribute("message", message);
                url = "/signup.jsp";
            } else if (!password.equals(Cpassword)) {
                message = "please make sure passwords are the same";
                session.setAttribute("message", message);
                url = "/signup.jsp";
            } else {
                try {
                    UserDB.updateUser(user);
                    url = "/home.jsp";
                } catch (SQLException ex) {
                    Logger.getLogger(membershipServlet.class.getName()).log(Level.SEVERE, null, ex);
                } catch (ClassNotFoundException ex) {
                    Logger.getLogger(membershipServlet.class.getName()).log(Level.SEVERE, null, ex);
                }
            }
        }