Файл: includes/up_billet.php
Строк: 24
<?php
include '../controller/controller.php';
up('Купить билет');
if(!isset($user)) {
header('Location: '.HOME);
exit();
}
if($user['money'] >= 10) {
echo '<div class="header"><img src="'.HOME.'/templates/images/55.png" alt="*" /> Купить билет</div>';
if(isset($_REQUEST['ok'])) {
$ch_rand = rand(1,1000);
$r_rand = rand(1,1000);
mysql_query('insert into `billet` set `kto` = "'.$user['id'].'", `time` = "'.time().'", `chislo` = "'.$ch_rand.'", `rand` = "'.$r_rand.'"');
mysql_query('update `user` set `money` = "'.$user['money'].'"-10 where `id` = "'.$user['id'].'"');
mysql_query('update `tirage` set bank = bank+7');
header('Location:'.HOME);
exit();
}
echo '<div class="home"><form method="POST">1 билет = 10 рублей<br /><input type="submit" name="ok" value="Купить 1 билет" /></form></div>';
}else{
echo '<div class="home"><div class="error">Недостаточно средств на счету.</div></div>';
}
down();
?>