Jeg har et problem med denne kode?

<?php
session_start();
if (session_is_registered("brugernavn")) {
include('conn.php');

$ip = $REMOTE_ADDR;

if ($_POST[action] == "update"){
    $text = ($_POST[text]);

    mysql_query("UPDATE * FROM aply_list SET combat_lvl = '$combat_lvl', email = '$email', str = '$str', attack = '$attack', defense = '$defense', text = '$text', ip = '$ip' WHERE runescape_user = '$_SESSION[brugernavn]'");
    echo "<B>Your stats has been updated!</B><br>";
}
?>
<body bgcolor="#777777">
<HR><HR>
<form action=account_setup.php method=post>
<?
$res = mysql_query("SELECT * FROM aply_list WHERE runescape_user = '$_SESSION[brugernavn]'");
$row = mysql_fetch_array($res);
?>
<font size="2" face="Verdana">
Combat level:<input type="text" name="combat_lvl" value="<?=$row[combat_lvl];?>"><br>
Email:<input type="text" name="email" value="<?=$row[email];?>"><br>
Strenght level:<input type="text" name="str" value="<?=$row[str];?>"><br>
Attack level:<input type="text" name="attack" value="<?=$row[attack];?>"><br>
Defense level:<input type="text" name="defense" value="<?=$row[defense];?>"><br>
<textarea name="text" value="<?=$row[text];?>" rows="4" cols="40"></textarea>
<input type="hidden" name="action" value="update">
<input type="submit" name="update" value="Update user stats">
<?
}
else{
echo"You have to sign in ;)";
}
?>


Det virker ikke når jeg indtaster de nye oplysninger??