Something

				$telefon = mysql_real_escape_string(strip_tags(htmlentities($_POST['telefon'])));				$epost = mysql_real_escape_string(strip_tags(htmlentities($_POST['epost'])));				$adresse = mysql_real_escape_string(strip_tags(htmlentities($_POST['adresse'])));				$firma = $row['firma'];								$q = mysql_query("update sandnes_bruker set telefon = '".$telefon."', set epost = '".$epost."', set adresse = '".$adresse."' where firma = '".$firma."' ");