Cant update values in mysql database php - php

Question

I am trying to update a record on my admin mysql table. But still no changes when i try this method.. I can't see the problem wth this code..
Info.php
<?php
$query = "SELECT * from admin where username = '{$_SESSION['login_user']}'";
$result = mysqli_query($conn,$query);
while($row=mysqli_fetch_assoc($result))
{
echo '<input type="text" class="form-control" name="user_id" disabled value='.$row['user_id'].'>';
echo '<input type="text" class = "form-control" name = "lastname" value='.$row['lname'].'>';
echo '<input type="text" class = "form-control" name = "firstname" value='.$row['fname'].'>';
echo '<input type="text" class = "form-control" name = "middlename" value='.$row['mname'].'>';
echo '<input type="text" class = "form-control" name = "address" value='.$row['address'].'>';
echo '<input type="text" class = "form-control" name = "contact" value='.$row['contact'].'>';
echo '<input type="text" class = "form-control" name = "email_add" value='.$row['email_add'].'>';
echo '<input type="text" class = "form-control" name = "username" value='.$row['username'].'>';
echo '<input type="password" class = "form-control" name = "password" value='.$row['password'].'>';
echo '<input type="password" class = "form-control" name = "confirmPassword" value='.$row['conf_pass'].'>';
}?>
<button type="submit" class="btn btn-primary" name="update">Submit</button>
update.php ---- I don't know what's the problem with it.
<?php
include('pgconnect.php');
if(isset($_GET['update'])){
$acctid = $_GET['user_id'];
$lname = $_GET['lastname'];
$fname = $_GET['firstname'];
$mname = $_GET['middlename'];
$address = $_GET['address'];
$contact = $_GET['contact'];
$email = $_GET['email_add'];
$user = mysql_real_escape_string($_GET['username']); # use whatever escaping function your db requires this is very important.
$pass = mysql_real_escape_string($_GET['password']);
$confpass = mysql_real_escape_string($_GET['confirmPassword']);
$sql = "UPDATE admin SET lname='$lname', fname='$fname', mname ='$mname', address='$address' contact = $contact, email_add = '$email', username ='$user',password = '$pass', conf_pass = '$confpass' where user_id = '$acctid'";
$result = mysqli_query($conn,$sql);
echo "$sql";
if($result){
echo"Succesully Updated!";
}
else
{
echo"Cannot be Updated!";
}
mysqli_close($conn);
}?>

Answer 1

To understand the mechanism behind forms:
index.html:
<form action="update.php?param=234" method="post">
<input type="text" name="firstfield" />
<button name="update">Submit</button>
</form>
update.php:
<?php
echo $_GET['param']; //should output 234
echo $_POST['firstfield']; //should output whatever you put in your textfield
var_dump($_POST['update']); //should return something
as you noticed, the parameter after ? in your action is passed as GET value and all the other values are POST values.