Something

$telefon = mysql_real_escape_string(strip_tags(htmlentities($_POST['telefon'])));$epost = mysql_real_escape_string(strip_tags(htmlentities($_POST['epost'])));$adresse = mysql_real_escape_string(strip_tags(htmlentities($_POST['adresse'])));$firma = $row['firma'];				$q = mysql_query("update sandnes_bruker set telefon = '".$telefon."', set epost = '".$epost."', set adresse = '".$adresse."' where firma = '".$firma."' ");