A simple currency system

[Mustachio]

I am only giving the currency script, as I assume that you know how to use databases.

Currency Getter

Code:

<?php
include('conn.php');
session_start();
$sql=mysql_query("SELECT * FROM users WHERE username = '$_SESSION[username]'");
$row=mysql_fetch_array($sql);
echo "You have <b>" . $row['money'] . "</b> cash!";
?>

Shop system

Code:

<?php
include('conn.php');
session_start();
$sql=mysql_query("SELECT * FROM users WHERE username = '$_SESSION[username]'");
$row=mysql_fetch_array($sql);
if(isset($_POST['submit'])){
if($row['money'] >= $_POST['price']){
mysql_query("UPDATE users SET money = money-$_POST['price'] WHERE username = '$_SESSION[username]'");
}
else{
echo "You lack sufficient funds";
}
?>

[noob007]

SANITIZE YOUR QUERIES PLOX

[Mustachio]

SANITIZE YOUR QUERIES PLOX

NO U
I REFUSE TO USE RESULT AS IT MAKES TEH SCRIPT LONGER WHICH TAKES UP MOAR SPACE

[Jacob__mybb_import1]

[Mustachio]

There is no need to sanitize this code, which uses no inputs.

[noob007]

Session variables are basically cookies, which can be modified by the client.