Untitled

<?php
    include 'header.php';

    session_start();

    //kick none users off the page
    if(isset($_SESSION["UserID"])) {

    }
    else {
        header('Location:login.php');
    }

    //Diaplay the user info
    $user = $_SESSION[UserID];

    $results = $con->query("select * from users where UserID='$user'");

    $row = $results->fetch_array(MYSQLI_BOTH);

    session_start();

    $_SESSION["FirstName"] = $row['FirstName'];
    $_SESSION["LastName"] = $row['LastName'];
    $_SESSION["Email"] = $row['Email'];
    $_SESSION["Password"] = $row['Password'];

    //update user info
    if(isset($_POST['update'])){

        $UpdateFN = $_POST['First_Name'];
        $UpdateLN = $_POST['Last_Name'];
        $UpdateEM = $_POST['Email'];
        $UpdatePW = $_POST['Password'];

        $StorePassword = password_hash($UpdatePW, PASSWORD_BCRYPT, array('cost' => 10));

        $sql = $con->query("UPDATE users SET FirstName = '{$UpdateFN}', LastName = '{$UpdateLN}', Email = '{$UpdateEM}', Password = '{$StorePassword}' where UserID=$user");

        header('Location:account.php');
    }

?>

<!DOCTYPE html>
<html lang="en">
    <head>
        <meta charset="utf-8" />
        <title></title>
    </head>
    <body>
        <p>Your account</p>
        <?php echo $_SESSION[UserID]; ?><br />
        <a href="logout.php">Logout</a>


        <form action="" method="post" name="AccountForm" id="AccountForm" >
            <input type="text" name="First_Name" placeholder="First Name" id="First_Name" required="required" value="<?php echo $_SESSION["FirstName"]?>"><br>
            <input type="text" name="Last_Name" placeholder="Last Name" id="Last_Name" required="required" value="<?php echo $_SESSION["LastName"]?>"><br>
            <input type="text" name="Email" placeholder="Email" id="Email" required="required" value="<?php echo $_SESSION["Email"]?>"><br>
            <input type="password" name="Password" placeholder="Password" id="Password" required="required" value="<?php echo $_SESSION["Password"]?>"><br><br>
            <input name="update" type="submit" value="Update">
        </form>

    </body>
</html>