my $sth =$dbh ->prepare("UPDATE products set pname=? and  unit=? 
and qty=? and cost=? WHERE id = ?");
[download]

should do the trick.

No. It shouldn't.

The SQL syntax is wrong (see meetraz's answer.