<?php
require_once("../connection.php");
mysql_query("SET NAMES cp1251");
$name=$_GET['name'];
$pid=$_GET['id'];
echo "<br/><br/>";
echo $name;
echo "<br/><br/>";
$logged=$_SESSION['login'];
$user=mysql_query("SELECT * FROM `users` WHERE `user`='$logged'") or die(mysql_error());
$rows=mysql_fetch_assoc($user);
$mymoney=$rows['money'];
$myattack=$rows['attack'];
$mydefence=$rows['defence'];
$myexp=$rows['exp'];
$select=mysql_query("SELECT * FROM `extras` WHERE `name`='$name'") or die(mysql_error());
$row=mysql_fetch_assoc($select);
$attack=$row['attack'];
$defence=$row['defence'];
$price=$row['price'];
$exp=$row['exp'];
$allattack=$myattack + $attack;
$alldefence=$mydefence + $defence;
$allexp=$myexp + $exp;
echo "<br/><br/>";
echo $allattack;
echo "<br/><br/>";
echo $alldefence;
echo "<br/><br/>";
echo $allexp;
echo "<br/><br/>";
if($mymoney >= $price) {
$update=mysql_query("UPDATE `users` SET `attack`='$allattack', `defence`='$alldefence', `exp`='$allexp' WHERE `user`='$logged'") or die(mysql_error());
if($update) {
echo "Вие успешно закупихте подобрението!";
}else{
echo "Възникна грешка пр закупуването на подобрението!";
}
}else{
echo "Нямате достатъчно пари!";
}
?>