update con funzione

[rocco.mod]

salve ragazzi ho fatto una funzione che seleziona da tre tabelle gli staff , i dipartimenti assegniati agli staff e la fira , adesso io il controllo del campo obligatorio l ho messo solo al nome, però mi modifica la password ugualmente perche

posto la funzione :

function UpdateStaffFromId($staffid,$nome,$cognome,$username,$email,$password,$enabled,$gruppostaff,$mobilenumber,$signature,$assdepart)
{
 global $dbcore ;

 $sql = mysql_query("update tech set 
                                     groupid = '$gruppostaff',
                                     nome = '$nome',
                                     cognome = '$cognome',
                                     username = '$username',
                                     password = '$password',
                                     email = '$email',
                                     mobilenumber = '$mobilenumber',
                                     lastchange = '".time()."',
                                     enabled = '$enabled'
                                     where staffid = ". $staffid ."
                                    ")or die (mysql_error());
          if(!$sql)
          {
         // exit();
          return false;
          }
          if(!$staffid)
          {
         // exit();
          return false;
          }
              $query = mysql_query("update  techsignatures  set signature = '$signature' where staffid = ". $staffid ." ") or die (mysql_error());
          if(!$query)
          {
         // exit();
          return false;
          }
          if(!$staffid)
          {
         // exit();
          return false;
          }
          $querycontr = mysql_query("select * from techassigns where staffid = ". $staffid ."")or die(mysql_error());
          $result = mysql_num_rows($querycontr);
          if(count($result) !=0){
          $querydel = mysql_query("delete from techassigns where staffid = ".$staffid." ")or die(mysql_error());
          if(!$querydel)
          {
         // exit();
          return false;
          }
          }
        if(!is_array($assdepart))
        {
            //exit();
            return false;
        }
        if(count($assdepart)==0)
        {
        //exit();
            return false;
        }
        if(!$staffid)
        {
        //exit();
            return false;
        }
        for($i=0; $i <count($assdepart); $i++ )
        {
             $queryas = mysql_query("replace into  techassigns (techassignsid ,departid ,staffid )values(null,". $assdepart[$i] .",". $staffid .") ")or die(mysql_error());
        }
        if(!$queryas)
        {
        //exit();
            return false;
        }
     return true;
} 

e posto la pagina dove c, e l update

if(isset($_POST['action'])and ($_POST['action']=='editstaff'))
{
if(!isset($_POST['nome'])){$nome='';}else{$nome = trim(addslashes($_POST['nome']));}
if(!isset($_POST['cognome'])){$cognome='';}else{$cognome = trim(addslashes($_POST['cognome']));}
if(!isset($_POST['username'])){$username='';}else{$username = trim(addslashes($_POST['username']));}
if(!isset($_POST['email'])){$email='';}else{$email = trim(addslashes($_POST['email']));}
if(!isset($_POST['password'])){$password='';}else{$password = trim(addslashes($_POST['password']));}
if(!isset($_POST['enabled'])){$enabled='';}else{$enabled = intval($_POST['enabled'])?1:0;}
if(!isset($_POST['gruppostaff'])){$gruppostaff='';}else{$gruppostaff = intval($_POST['gruppostaff']);}
if(!isset($_POST['mobilenumber'])){$mobilenumber='';}else{$mobilenumber = trim(addslashes($_POST['mobilenumber']));}
if(!isset($_POST['signature'])){$signature='';}else{$signature = trim(addslashes($_POST['signature']));}
if(!isset($_POST['assdepart'])){$assdepart='';}else{$assdepart = $_POST['assdepart'];}
if(!isset($nome) or $nome ==''){
$smarty->assign('messageerrortrue' , true);
$smarty->assign('errormessage' , 'One of the required field(s) is empty ' );
}
else{


$pass = $password;
$password = md5($password);




$updatestaff = UpdateStaffFromId($staffid,$nome,$cognome,$username,$email,$password,$enabled,$gruppostaff,$mobilenumber,$signature,$assdepart);
if($updatestaff)
{
$smarty->assign('messageerrorfalse' , true);
$smarty->assign('infomessage' , 'Staff [b][/b] inserted successfully' );
}
else{
$smarty->assign('messageerrortrue' , true);
$smarty->assign('errormessage' , 'errore' );

}



}
}