invisio v2.0

<?php
include("../../../config/main_function.php");
$secure = "cAh3DrJACzw4RbU";
$connection = connectDB($secure);

$stm_id = mysqli_real_escape_string($connection, $_POST['stm_id']);
$sql = "SELECT * FROM tbl_company_statements WHERE stm_id = '$stm_id'";
$res = mysqli_query($connection, $sql);
$row = mysqli_fetch_assoc($res);
?>
<div class="modal-header">
    <h4 class="modal-title">แก้ไขงบการเงิน</h4>
    <button type="button" class="close" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>
</div>
<div class="modal-body">
    <form action="" id="form_add_budget">
        <div class="row">
            <div class="col-6">
                <div class="form-group">
                    <label for=""></label>
                    <input type="text"
                        class="form-control" name="year" id="year" aria-describedby="helpId" placeholder="ปี" value="<?php echo $row['year']; ?>">
                </div>
            </div>
            <div class="col-6">
                <div class="form-group">
                    <label for=""></label>
                    <input type="text"
                        class="form-control" name="budget" id="budget" aria-describedby="helpId" placeholder="งบ" value="<?php echo $row['budget']; ?>">
                </div>
            </div>
        </div>
    </form>
</div>
<div class="modal-footer">
    <button type="button" class="btn btn-primary" onclick="Addbudget()"><i class="fa fa-check"></i>&nbsp;บันทึก</button>
    <button type="button" class="btn btn-white" data-dismiss="modal">ปิด</button>
</div>