Unfortunately, both your PHP and SQL syntax is wrong, especially pertaining to delimiting strings (and not delimiting, or correctly delimiting, database, table and column names). If you are using the PDO extension, I would expect something like this:
$statement = $connection->prepare('UPDATE woodove_grill2010.wheretobuy
SET name=:name, address=:address, city=:city, province=:province, zip=:zip,
phone=:phone, fax=:fax, email=:email, website=:website, temp=:temp WHERE ID=:ID');
$placeholders = array('name', 'address', 'city', 'province', 'zip', 'phone', 'fax', 'email', 'website', 'ID');
foreach ($placeholders as $placeholder) {
if (isset($_POST[$placeholder])) {
$statement->bindValue(':' . $placeholder, $_POST[$placeholder], PDO::PARAM_STR);
} else {
// Handle the input error.
}
}
