<?php
$servername = "";
$username = "";
$password = "";
$dbname = "";

        // Create connection
$conn = new mysqli($servername, $username, $password, $dbname);
// Check connection
if ($conn->connect_error) {
    die("Connection failed: " . $conn->connect_error);
}

$UID = (int)$_GET['StaffID'];



$sql ="SELECT * FROM staff WHERE StaffID = '$UID'"
     or die(mysqli_error());

if(mysqli_num_rows($sql)>=1){
    while($row = mysqli_fetch_array($query)) {
        $Name = $row['Name'];
        $surname = $row['Address'];
        $FBID = $row['Telephone'];
        $IMGNU = $row['BusinessID'];
    }
?>

<form action="update.php" method="post">

<input type="hidden" name="ID" value="<?=$UID;?>"><br>
Name: <input type="text" name="Name" value="<?=$Name?>"><br>
Address: <input type="text" name="Address" value="<?=$Address?>"><br>
Telephone: <input type="text" name="Telephone" value="<?=$Telephone?>"><br>
BusinessID: <input type="text" name="BusinessID" value="<?=$BusinessID?>"><br>

<input type="Submit">
</form>
<?php
}else{
    echo 'No entry found. <a href="javascript:history.back()">Go back</a>';
}
?>

<?php
$servername = "";
$username = "";
$password = "";
$dbname = "";

        // Create connection
$conn = new mysqli($servername, $username, $password, $dbname);
// Check connection
if ($conn->connect_error) {
    die("Connection failed: " . $conn->connect_error);
}

    $StaffID= (int)$_POST["StaffID"];

   $Name = $conn->real_escape_string($_REQUEST['Name']);
$Address = $conn->real_escape_string($_REQUEST['Address']);
$Telephone= $conn->real_escape_string($_REQUEST['Telephone']);
$BusinessID = $conn->real_escape_string($_REQUEST['BusinessID']);


    $query="UPDATE staff
            SET Name = '$Name', Address = '$Address', FBID = '$Telephone'
            WHERE ID='$StaffID";


mysqli_query($query)or die(mysqli_error());
if(mysqli_affected_rows()>=1){
    echo "<p>($ud_ID) Record Updated<p>";
}else{
    echo "<p>($ud_ID) Not Updated<p>";
}
?>