Unnamed

<?php
	$do = $_GET['do'];
	$db->Query("SELECT  * FROM gr_users WHERE user_id='".$_SESSION['user_id']."'","userinfo");
	$userinfo = mysql_fetch_assoc($db->res['userinfo']);
	
	if ($do == 11)
	{
		$firstname = mysql_real_escape_string($_POST['firstname']);
		$lastname = mysql_real_escape_string($_POST['lastname']);
		$homepage = mysql_real_escape_string($_POST['homepage']);
		$msn = mysql_real_escape_string($_POST['msn']);
		$yahoo = mysql_real_escape_string($_POST['yahoo']);
		$aim = mysql_real_escape_string($_POST['aim']);
		$age = mysql_real_escape_string($_POST['age']);
		$location = mysql_real_escape_string($_POST['location']);
		$email = mysql_real_escape_string($_POST['email']);
		// $avatarpath = mysql_real_escape_string($_POST['avatarpath']);
		$profile_text = mysql_real_escape_string($_POST['profile_text']);
		$hw_connection = mysql_real_escape_string($_POST['hw_connection']);
		$hw_os = mysql_real_escape_string($_POST['hw_os']);
		$hw_monitor = mysql_real_escape_string($_POST['hw_monitor']);
		$hw_graphics_card = mysql_real_escape_string($_POST['hw_graphics_card']);
		$hw_motherboard = mysql_real_escape_string($_POST['hw_motherboard']);
		$hw_cpu = mysql_real_escape_string($_POST['hw_cpu']);
		$hw_memory = mysql_real_escape_string($_POST['hw_memory']);
		$hw_soundcard = mysql_real_escape_string($_POST['hw_soundcard']);
		$hw_storage = mysql_real_escape_string($_POST['hw_storage']);
		
		$db->Query("UPDATE gr_users SET firstname='$firstname',lastname='$lastname',homepage='$homepage',msn='$msn',yahoo='$yahoo',
		aim='$aim',age='$age',location='$location',email='$email',profile_text='$profile_text',hw_connection='$hw_connection',
		hw_os='$hw_os',hw_monitor='$hw_monitor',hw_graphics_card='$hw_graphics_card',hw_motherboard='$hw_motherboard',hw_cpu='$hw_cpu',
		hw_memory='$hw_memory',hw_soundcard='$hw_soundcard',hw_storage='$hw_storage' WHERE user_id='".$_SESSION['user_id']."'");
		echo "<p style=\"font-size: 12px;\"><br /><b>Your profile is now updated.</b></p><br />\n";
	} elseif ......