if (!isset($_GET['oid']) || (int)$_GET['oid'] <= 0) {
    header('Location: index.php');
}
    $orderId = (int)$_GET['oid'];
    $Name  = $_POST['txtName'];
    $sql = "UPDATE tbl_order
            SET Name = '$Name'
            WHERE od_id = $orderId";
    $result = dbQuery($sql);