willpdone.php

<?php

session_start();
require "global_func.php";
if ($_SESSION['loggedin'] == 0)
{
    header("Location: login.php");
    exit;
}
$userid = $_SESSION['userid'];
require "header.php";
$h = new headers;
$h->startheaders();
include "mysql.php";
global $c;
$is =
        mysql_query(
                "SELECT u.*,us.* FROM users u LEFT JOIN userstats us ON u.userid=us.userid WHERE u.userid=$userid",
                $c) or die(mysql_error());
$ir = mysql_fetch_array($is);
check_level();
$fm = money_formatter($ir['money']);
$cm = money_formatter($ir['crystals'], '');
$lv = date('F j, Y, g:i a', $ir['laston']);
$h->userdata($ir, $lv, $fm, $cm);
$h->menuarea();
if ($_GET['action'] == "cancel")
{
    print "You have cancelled your donation. Please donate later...";
}
else if ($_GET['action'] == "done")
{
    if (!$_GET['tx'])
    {
        die("Get a life.");
    }
    $quantity =
            mysql_real_escape_string(stripslashes($_GET['quantity']), $c);
    mysql_query(
            "INSERT INTO willplogs VALUES(NULL,$userid," . time()
                    . ",'{$quantity}');", $c);
    if ($_GET['quantity'] == 'one')
    {
        $q = 1;
    }
    else if ($_GET['quantity'] == 'five')
    {
        $q = 5;
    }
    else
    {
        echo 'Stop cheating!';
        $h->endpage();
        exit;
    }
    mysql_query("INSERT INTO inventory VALUES(NULL,34,$userid,$q)", $c);
    print 
            "Your will potions have been credited, if you are cheating, we will jail you.";
}
$h->endpage();