my $sth =$dbh ->prepare("UPDATE products set pname=? and  unit=? 
and qty=? and cost=? WHERE id = ?");