I have put in mysql_query($sql) or die(mysql_error()); in UPDATE_AC.PHP but that didn't work..

What can i do so my code isn't so easy to enject?
I don't know so much about php so hope you can help me. Also to get the UPDATE working..