my $sth =$dbh ->prepare ("UPDATE products set pname=$pname and  unit=$unit and qty=$qty and cost=$cost WHERE id = $pid");