I can't find an error...

[ryeman98]

There are no mysql_error 's and everything works fine except for the points and the account_balance don't update...

 

if ($_GET['action'] == "deposit") {
	if (!$_POST['dep_point']) {
	echo "You need to enter a valid amount!";
	}
include("config.php");
$username = $_SESSION['username'];
$GetHandPoints = mysql_query("SELECT * FROM `users` WHERE username='$username'") or die(mysql_error());
$row_getpoints = mysql_fetch_array($GetHandPoints);
	if ($row_getpoints['points'] < $deposit_points) {
	echo "<b>Error!</b> You don't have that many points!";
	} else {
$depositpoints = $_POST['dep_point'];
	$update = mysql_query("UPDATE `users` SET points=(points-$depositpoints), account_balance=(account_balance+$depositpoints) WHERE username='$username'") or die(mysql_error());
	header('Location: /bank.php');
	}

[ss32]

check your WHERE statement... im pretty sure username is a reserve word and needs to be enclosed in back quotes

also make sure that you called session_start (=

[jitesh]

Try this

 

if(isset($_POST['dep_point']) and is_numeric($_POST['dep_point'])){
      $depositpoints = $_POST['dep_point'];
}else{
     $depositpoints = 0;

}

$sql = "UPDATE `users` SET points = points - ". $depositpoints ." , account_balance = account_balance + ".$depositpoints." WHERE username='".$username."'";

$update = mysql_query($sql) or die(mysql_error());			

[ryeman98]

check your WHERE statement... im pretty sure username is a reserve word and needs to be enclosed in back quotes

also make sure that you called session_start (=

 

Example?