Code: Select all
<?php
session_start();
include("functions.php");
include("header.php");
connect();
include("safe.php");
if(!isset($_SESSION['uid'])){
$id=$_SESSION['id'];
echo "<script type='text/javascript'>window.location='index.php';</script>";
}else{
if(isset($_POST['buy'])){
$buyfood = protect($_POST['buyfood']);
$gold_needed = (0.5 * $buyfood);
if($buyfood == ""){
output("You must enter an amount!");
}elseif($stats['gold'] < $gold_needed){
echo "You do not have enough gold!";
}elseif($stats['gold'] = 0){
echo "Please come back when you have gold!";
}else{
$buyfood = protect($_POST['buyfood']);
$gold_needed = (0.5 * $buyfood);
$stats['gold'] = $stats['gold'] - $gold_needed;
$stats['food'] += $buyfood;
$update_gold = mysql_query("UPDATE `stats` SET `gold`='".$stats['gold']."'
WHERE `id`='".$_SESSION['uid']."'") or die(mysql_error());
$update_food = mysql_query("UPDATE `stats` SET `food`='".$stats['food']."'
WHERE `id`='".$_SESSION['uid']."'") or die(mysql_error());
}
}
?>