if problem :(

[JakeD]

<?
$amount = $_POST['amount'];
$id = $userdata['user_id'];
$otherid = $_POST['id'];
$usermoney = "user_money";
$money = $userdata['user_money'];
$take = $money - $amount;
$othermoney = dbquery("SELECT ".$usermoney." FROM ".$db_prefix."users WHERE user_id='".$otherid."'");
$omoney = mysql_fetch_row($othermoney); $omoney=$omoney[0];
$money = $omoney;
$times = $amount / 2;
$kill="false";
if ($amount > $money)
{

echo "<script language=\"Javascript\">

<!--

alert (\"Not enough money\")
//-->

</script>";
echo "<SCRIPT LANGUAGE=\"JavaScript\">
<!-- 
window.location=\"/\";
// -->
</script>";
$kill = "fasleasdasdasdasdasdasdasd";
}	


if ($times >= $othermoney)
{
$kill="true";

}
else 
{
echo "Your hitman did not successfully kill the person he was attacking, and ran off with your money, pay him more next time";
dbquery("UPDATE ".$db_prefix."users SET user_money=".$take." WHERE user_id='".$id."'");
}
if ($kill == "true")
{
$rwd = $money + $othermoney;
echo "Successfully killed your target, they had \$$othermoney which is now yours.";
dbquery("UPDATE ".$db_prefix."users SET user_money=".$rwd." WHERE user_id='".$id."'");
dbquery("DELETE FROM ".$db_prefix."users WHERE user_id='$otherid'");
dbquery("DELETE FROM ".$db_prefix."articles WHERE article_name='$otherid'");
dbquery("DELETE FROM ".$db_prefix."comments WHERE comment_name='$otherid'");
dbquery("DELETE FROM ".$db_prefix."messages WHERE message_to='$otherid'");
dbquery("DELETE FROM ".$db_prefix."messages WHERE message_from='$otherid'");
dbquery("DELETE FROM ".$db_prefix."news WHERE news_name='$otherid'");
dbquery("DELETE FROM ".$db_prefix."poll_votes WHERE vote_user='$otherid'");
dbquery("DELETE FROM ".$db_prefix."ratings WHERE rating_user='$otherid'");
dbquery("DELETE FROM ".$db_prefix."shoutbox WHERE shout_name='$otherid'");
dbquery("DELETE FROM ".$db_prefix."threads WHERE thread_author='$otherid'");
dbquery("DELETE FROM ".$db_prefix."posts WHERE post_author='$otherid'");
}
?>

 

if ($amount > $money)

 

i made $amount > $money, and it alerts the javascript....but it still runs the SQL querys! im getting so frustrated...it shouldnt because i put if ($kill == "true") to run it, and by default kill doesnt = true!!!! please help me:( thanks guys

[cmgmyr]

enclose everything after the first IF with else {Stuff here} this way it won't execute the sql

[JakeD]

Thanks for replying, so i would ad an else after the if?

if ($amount > $money)
{

echo "<script language=\"Javascript\">

<!--

alert (\"Not enough money\")
//-->

</script>";
echo "<SCRIPT LANGUAGE=\"JavaScript\">
<!-- 
window.location=\"/\";
// -->
</script>";
$kill = "fasleasdasdasdasdasdasdasd";
}	

else {echo "";}

 

like so?

[cmgmyr]

yup, and where you have that echo put the rest of your code:

if ($times >= $othermoney)
{
$kill="true";

}
else 
{
echo "Your hitman did not successfully kill the person he was attacking, and ran off with your money, pay him more next time";
dbquery("UPDATE ".$db_prefix."users SET user_money=".$take." WHERE user_id='".$id."'");
}
if ($kill == "true")
{
$rwd = $money + $othermoney;
echo "Successfully killed your target, they had \$$othermoney which is now yours.";
dbquery("UPDATE ".$db_prefix."users SET user_money=".$rwd." WHERE user_id='".$id."'");
dbquery("DELETE FROM ".$db_prefix."users WHERE user_id='$otherid'");
dbquery("DELETE FROM ".$db_prefix."articles WHERE article_name='$otherid'");
dbquery("DELETE FROM ".$db_prefix."comments WHERE comment_name='$otherid'");
dbquery("DELETE FROM ".$db_prefix."messages WHERE message_to='$otherid'");
dbquery("DELETE FROM ".$db_prefix."messages WHERE message_from='$otherid'");
dbquery("DELETE FROM ".$db_prefix."news WHERE news_name='$otherid'");
dbquery("DELETE FROM ".$db_prefix."poll_votes WHERE vote_user='$otherid'");
dbquery("DELETE FROM ".$db_prefix."ratings WHERE rating_user='$otherid'");
dbquery("DELETE FROM ".$db_prefix."shoutbox WHERE shout_name='$otherid'");
dbquery("DELETE FROM ".$db_prefix."threads WHERE thread_author='$otherid'");
dbquery("DELETE FROM ".$db_prefix."posts WHERE post_author='$otherid'");
}

[JakeD]

oooo, thanks a million man

[cmgmyr]

no problem, glad I could help