fix bug in update.php so that placeholders are values