[PHP] Problem z kupowaniem przedmiotow w sklepie Opcje

[Rafiks1992]

Siemka ponownie (IMG:style_emoticons/default/wink.gif) dotarlem do kolejnego etapu, wczoraj dodalem nowa tabele o nazwie shop w ktorej umiescilem 3 kolumny id, cena, nazwa a takze dodalem tam 4 losy do kupienia: mikrolos, minilos, megalos, hiperlos ustawiajac oczywiscie id na A.I a takze ceny tych losow i nazwy. W tabeli users dodalem takze kolumny: mikrolos, minilos, megalos, hiperlos aby miec mozliwosc wyswietlenia ile dany uzytkownik posiada tych losow. Poogarnialem wszystko i zmienilem w mysql losowe dane dla kazdego goscia aby sprawdzic czy dziala i faktycznie wyswietla ilosc losów w Twój profil. Tylko teraz mam problem ze skryptem kupowania kolejnych losów. Stworzylem nowy plik i nazwie shop.php z takim kodem:

[PHP] pobierz, plaintext 
<?php
 
$title = "Sklep";
include_once 'header.php';
 
if (!$session->is_logged_in()) {
	$session->message("Musisz sie zalogowac!", "success");
	redirect_to("login.php");
}
?>
 
<h1>Sklep</h1>
 
<?php 
echo 'Witamy w sklepie, mozesz tutaj kupic losy.';
?> <br><br><br>
 
<?php
$userdata = User::getUser($session->user_name);
echo 'Masz aktualnie: ' .$userdata->money. 'zl.';
?> <br>
 
<?php 
echo 'Kup:';
?> <br>
 
<?php 
 
if(isset($_POST['kup_los'])) {
	if(!empty($_POST['mikrolos'])) {
		$mikrolos = ($_POST['mikrolos']*$cost);
		if($money >= $mikrolos) {
			mysql_query("UPDATE users SET mikrolos='".$_POST['mikrolos']."' WHERE id=".$pokaz['id']);
			mysql_query("UPDATE users SET money=money-".$cost." WHERE id=".$pokaz['id']);
		} else {
			echo "Nie stać cie";
		}
	}
}
 
 
 
?>
 
<form action='' method='post' class='form'>
Mikrolos: <input type='text' name='mikrolos' value=''>
<button name='kup_los' type='submit'>Kup</button>
</form> 
 
<?php
 
include_once 'footer.php'; 
 
?>
[PHP] pobierz, plaintext 

Zrobilem narazie tylko ten pierwszy los czyli mikrolos do kupienia, jednak gdy na stronie w formularzu wpisze chocby 1 - a stac mnie na ten los to nic sie nie dzieje, moglby mi ktos wyjasnic dlaczego?

[Rafiks1992]

Jak to nie ma w php (IMG:style_emoticons/default/tongue.gif) ? masz na mysli ze wrzucam komendy np z php 4.5 czy jakiegos tam a teraz trzeba 7.1 (IMG:style_emoticons/default/biggrin.gif) ? Cholercia to bardzo niedobrze robie jesli faktycznie tak jest, co do tego user $database wrzucam plik userclass.php aby to przyblizyc poniewaz szczerze mowiac jest tutaj nawalone tyle kodu ze nie ogarnalem polowy

[PHP] pobierz, plaintext 
<?php
 
class User {
 
    protected static $table_name = "users";
    protected static $db_fields = array('id', 'username', 'password', 'email', 'status', 'actcode' ,'created_at' ,'money');
 
    public $id;
    public $username;
    public $password;
    public $email;
    public $status = "pending";
    public $actcode;
    public $created_at;
    public $money;
 
    public static function authenticate($username = "", $password = "") {
        global $database;
 
        $username = $database->escape_value($username);
        $password = $database->escape_value($password);
        $password = secure_string($password);
 
        $sql = "SELECT * FROM " . self::$table_name . " users WHERE username = '{$username}' AND password = '{$password}' LIMIT 1";
        $result_array = self::find_by_sql($sql);
        return !empty($result_array) ? array_shift($result_array) : false;
    }
 
	public static function activate($username, $actcode) {
		global $database;
		global $session;
 
		$username = $database->escape_value($username);
        $actcode = $database->escape_value($actcode);
 
		$sql = "SELECT status FROM users WHERE username = '{$username}' AND actcode = '{$actcode}' AND status = 'pending' LIMIT 1";
		$database->query($sql);
		if($database->affected_rows() == 1) {
			$sql = "UPDATE users SET status = 'confirmed' WHERE username = '{$username}' AND actcode = '{$actcode}'";
			$result = $database->query($sql);
 
			if($result) {
				return true;
			} else {
				return false;
			}} else {
			return false;
		}
	}
 
	public static function getUser($username) {
		global $database;
 
		$username = $database->escape_value($username);
 
		$sql = "SELECT * FROM users WHERE username = '{$username}' LIMIT 1";
		$result_array = self::find_by_sql($sql);
	//	var_dump($result_array);
        return !empty($result_array) ? array_shift($result_array) : false;
 
	}
 
	public static function user_email($username, $email) {
		global $database;
 
		$username = $database->escape_value($username);
		$email = $database->escape_value($email);
 
		$sql = "SELECT username FROM users WHERE username = '{$username}' AND email = '{$email}' LIMIT 1";
		$database->query($sql);
		if($database->affected_rows() == 1) {
			return true;
		} else 
			return false;
	}
 
	public static function exists($where,$username) {
		global $database;
 
		$username = $database->escape_value($username);
		$where = $database->escape_value($where);
 
		$sql = "SELECT '{$where}' FROM users WHERE {$where} = '{$username}' LIMIT 1";
		$database->query($sql);
		if($database->affected_rows() == 1) {
			return true;
		} else 
			return false;
	}
 
 
    public static function find_all() {
        return self::find_by_sql("SELECT * FROM " . self::$table_name);
    }
 
    public static function find_by_id($id = 0) {
        $result_array = self::find_by_sql("SELECT * FROM " . self::$table_name . " WHERE id={$id} LIMIT 1");
        return !empty($result_array) ? array_shift($result_array) : false;
    }
 
    public static function find_by_sql($sql = "") {
        global $database;
        $result_set = $database->query($sql);
        $object_array = array();
        while($row = $database->fetch_array($result_set)) {
            $object_array[] = self::instantiate($row);
        }
        return $object_array;
    }
 
    public static function count_all() {
        global $database;
        $sql = "SELECT COUNT(*) FROM " . self::$table_name;
        $result_set = $database->query($sql);
        $row = $database->fetch_array($result_set);
        return array_shift($row);
    }
 
    private static function instantiate($record) {
        $object = new self;
        foreach($record as $attribute => $value) {
            if($object->has_attribute($attribute)) {
                $object->$attribute = $value;
            }
        }
        return $object;
    }
 
    private function has_attribute($attribute) {
        return array_key_exists($attribute, $this->attributes());
    }
 
    protected function attributes() {
        $attributes = array();
        foreach(self::$db_fields as $field) {
            if(property_exists($this, $field)) {
                $attributes[$field] = $this->$field;
            }
        }
        return $attributes;
    }
 
    protected function sanitized_attributes() {
        global $database;
        $clean_attributes = array();
        foreach($this->attributes() as $key => $value) {
            $clean_attributes[$key] = $database->escape_value($value);
        }
        return $clean_attributes;
    }
 
    public function create() {
        global $database;
        $attributes = $this->sanitized_attributes();
        $sql = "INSERT INTO " . self::$table_name . " (";
        $sql .= join(", ", array_keys($attributes));
        $sql .= ") VALUES ('";
        $sql .= join("', '", array_values($attributes));
        $sql .= "')";
        if($database->query($sql)) {
            $this->id = $database->insert_id();
            return true;
        } else {
            return false;
        }
    }
 
    public function update() {
        global $database;
        $attributes = $this->sanitized_attributes();
        $attribute_pairs = array();
        foreach($attributes as $key => $value) {
            $attribute_pairs[] = "{$key}='{$value}'";
        }
        $sql = "UPDATE " . self::$table_name . " SET ";
        $sql .= join(", ", $attribute_pairs);
        $sql .= " WHERE id=" . $database->escape_value($this->id);
        $database->query($sql);
        return ($database->affected_rows() == 1) ? true : false;
    }
 
    public function delete() {
        global $database;
        $sql = "DELETE FROM " . self::$table_name;
        $sql .= " WHERE id=" . $database->escape_value($this->id);
        $sql .= " LIMIT 1";
        $database->query($sql);
        return ($database->affected_rows() == 1) ? true : false;
    }
 
}
 
?>
[PHP] pobierz, plaintext 

Z tego co tutaj czytam zmienna $database daje nam chyba mozliwosc laczenia z baza lub sprawdzenia uzytkownika bo jest wszedzie username, useremail = database