prepare("SELECT * FROM games WHERE id = :id");
$q->bindParam(':id',$id,PDO::PARAM_INT);
$q->execute();
$item = $q->fetch();
$itemUser = new User($con, $item['creator']);
if(!$item) {
header('location: /error?err=404');
exit;
}
if($loggedIn == true) {
if($_POST['submit'] ?? "No" == "Yes") {
if($user->getMoney('false') >= htmlspecialchars($item["price"])) {
$q = $con->prepare("UPDATE users SET money=money-:price WHERE id=:id");
$q->bindParam(':id',$_SESSION['user'],PDO::PARAM_INT);
$q->bindParam(':price',$item['price'],PDO::PARAM_INT);
$q->execute();
}
}
}
?>
header();
?>
<?php echo htmlspecialchars($item["name"]); ?> | <?php echo $sitename; ?>
">
G
Getting ready to launch
'.strtoupper($sitename).'
';
}
?>