check this line:
<input type=hidden name=rowid value=<?= $rowid ?>>
I can't see where $rowid is coming from. If it was from the db query, it should be something like $row['id'].
if $rowid isn't set, your queries
"UPDATE users SET disabled='1' WHERE id='$rowid'";
"UPDATE users SET disabled='0' WHERE id='$rowid'";
would execute without a problem. They'd try to update records where id is empty, and probably update no records, but wouldn't return an error.