MySQLi & mysql_real_escape_string() Giving me a bunch of errors - string

Question

Im having problem with my UPDATE code., since i'm new at php, im trying to figure out what's been the prolem with my UPDATE command here's my line of code. My insert and delete commands are good to go but this one gives me a headache for 4 hours now.
<?php
include 'includes/conn.php';
if($_POST){
//write query
$sql = "UPDATE
member
SET
fname = ?,
lname = ?,
mname = ?,
email = ?,
address = ?,
gender = ?,
contact = ?,
email = ?,
username = ?,
password = ?
WHERE
mem_id = ?";
$stmt = $mysqli->prepare($sql);
$stmt->bind_param(
'sssssssssi',
$_POST['fname'],
$_POST['lname'],
$_POST['mname'],
$_POST['email'],
$_POST['address'],
$_POST['gender'],
$_POST['contact'],
$_POST['username'],
$_POST['password'],
$_POST['mem_id']
);
if($stmt->execute()){
echo "User was updated.";
$stmt->close();
}else{
die("Unable to update.");
}
}
$sql = "SELECT
fname, lname, mname, email, address, gender, contact, username, password, mem_id
FROM
member
WHERE
mem_id = \"" . $mysqli->real_escape_string($_GET['mem_id']) . "\"
LIMIT
0,1";
$result = $mysqli->query( $sql );
$row = $result->fetch_assoc();
extract($row);
$result->free();
$mysqli->close();
?>
hope you guys could help o by the way it gives me this error
Undefined index: mem_id in C:\xampp\htdocs\prjTheVillagePlaygroup\execute_editmenu.php on line 134
Warning: extract() expects parameter 1 to be array, null given in C:\xampp\htdocs\prjTheVillagePlaygroup\execute_editmenu.php on line 141

Answer 1

You have
email = ?
listed twice in the update statement. Delete the second one.
Note that your binding does not have to change. It will have the correct number of parameters after the deletion.
Also, you are using $_GET['mem_id'] where it should likely be $_POST['mem_id'] - all your other variables are set with $_POST
With regard to Warning: extract() expects parameter 1 to be array, null given, this is due to the query failing.
Check for the $result to make sure the query succeeded and what the error is:
$result = $mysqli->query( $sql );
if (!$result)
printf("Error: " . mysqli->error); // or use die("Error: " . mysqli->error)
}
$row = $result->fetch_assoc();
extract($row);