is this correct php for WcoinC, WCoinP, WCoinG in zteam database

[clerigz]

Hi everyone anyone can help me about this php for adding wcoinc for zteam server

is this correct?

<?
$exchange_settings = simplexml_load_file('engine/config_mods/exchange.xml');
$zen = $exchange_settings->zen;
$Wcoin = $exchange_settings->coin;
$gp = $exchange_settings->gp;

$cred_wc = $exchange_settings->credwc;
$cred_wp = $exchange_settings->credwp;
$cred_gp = $exchange_settings->credgp;
$cred_zen = $exchange_settings->credzen;

if (isset($_POST['movecred']))
{
  $change	=	htmlspecialchars($_POST['change'],ENT_QUOTES);
  $amount = htmlspecialchars($_POST['cred_amount'],ENT_QUOTES);
  $cred =  mssql_query("SELECT credits FROM MEMB_CREDITS WHERE memb___id='$user_auth_id'");
  $kredit = mssql_fetch_array($cred);
  $wallet = mssql_query("SELECT memb_zen FROM MEMB_INFO WHERE memb___id='$user_auth_id'");
  $purse = mssql_fetch_array($wallet);
  $www = mssql_query("SELECT WCoinC,WCoinP,WCoinG FROM GameShop_Data WHERE AccountID'$user_auth_id'");
  $wcp = mssql_fetch_array($www);
  
  if($change == 'zen')
  {
       if (!eregi("^[0-9\]{1,11}$", $amount))
        { 
        echo  msg('0','Wrong value');
        }
        elseif ($amount > $kredit[0] )
        {
        echo  msg('0','Not enough credits');
        }
        elseif (($amount*$zen)+$purse[0] > 10000000000)
        {
        echo  msg('0','You have reached web bank limit');
        }
        else
        {
          $new_money = ($amount*$zen)+$purse[0];
          $new_cred = $kredit[0]-$amount;
          mssql_query("UPDATE MEMB_CREDITS SET credits='$new_cred' WHERE memb___id='$user_auth_id'");
          mssql_query("UPDATE MEMB_INFO SET memb_zen='$new_money' WHERE memb___id='$user_auth_id'");
          echo  msg('1','Exchange was successfull');
        }
  }
  
  if($change == 'coin')
  {
       if (!eregi("^[0-9\]{1,11}$", $amount))
        { 
        echo  msg('0','Wrong value');
        }
        elseif ($amount > $kredit[0] )
        {
        echo  msg('0','Not enough credits');
        }
        else
        {
          $new_point = ($amount*$Wcoin)+$wcp[0];
          $new_cred = $kredit[0]-$amount;
          mssql_query("UPDATE MEMB_CREDITS SET credits='$new_cred' WHERE memb___id='$user_auth_id'");
          mssql_query("UPDATE GameShop_Data SET WCoinC='$new_point' WHERE MemberGuid='$user_auth_id'");
          echo  msg('1','Exchange was successfull');
        }
  }
  
  if($change == 'coinp')
  {
       if (!eregi("^[0-9\]{1,11}$", $amount))
        { 
        echo  msg('0','Wrong value');
        }
        elseif ($amount > $kredit[0] )
        {
        echo  msg('0','Not enough credits');
        }
        else
        {
          $new_point = ($amount*$Wcoin)+$wcp[1];
          $new_cred = $kredit[0]-$amount;
          mssql_query("UPDATE MEMB_CREDITS SET credits='$new_cred' WHERE memb___id='$user_auth_id'");
          mssql_query("UPDATE GameShop_Data SET WCoinP='$new_point' WHERE MemberGuid='$user_auth_id'");
          echo  msg('1','Exchange was successfull');
        }
  }
  
  if($change == 'gp')
  {
       if (!eregi("^[0-9\]{1,11}$", $amount))
        { 
        echo  msg('0','Wrong value');
        }
        elseif ($amount > $kredit[0] )
        {
        echo  msg('0','Not enough credits');
        }
        else
        {
          $new_point = ($amount*$gp)+$wcp[2];
          $new_cred = $kredit[0]-$amount;
          mssql_query("UPDATE MEMB_CREDITS SET credits='$new_cred' WHERE memb___id='$user_auth_id'");
          mssql_query("UPDATE GameShop_Data SET WCoinG='$new_point' WHERE MemberGuid='$user_auth_id'");
          echo  msg('1','Exchange was successfull');
        }
  }

}

if (isset($_POST['movecoin']))
{
  $changec	=	htmlspecialchars($_POST['changec'],ENT_QUOTES);
  $amount = htmlspecialchars($_POST['coin_amount'],ENT_QUOTES);
  $cred =  mssql_query("SELECT credits FROM MEMB_CREDITS WHERE memb___id='$user_auth_id'");
  $kredit = mssql_fetch_array($cred);
  $wallet = mssql_query("SELECT memb_zen FROM MEMB_INFO WHERE memb___id='$user_auth_id'");
  $purse = mssql_fetch_array($wallet);
  $www = mssql_query("SELECT WCoinC,WCoinP,WCoinG FROM GameShop_Data WHERE MemberGuid='$user_auth_id'");
  $wcp = mssql_fetch_array($www);

  if($changec == 'wcoinc')
  {
       if (!eregi("^[0-9\]{1,11}$", $amount))
        { 
          echo  msg('0','Wrong value');
        }
        elseif ($amount > $wcp[0] )
        {
          echo  msg('0','Not enough WCoinC');
        }
        elseif (($amount % $cred_wc) != 0)
        {
          echo  msg('0','Enter value what can be divided by '.$cred_wc.'');  
        }
        else
        {
          $new_cred = ($amount/$cred_wc)+$kredit[0];
          $new_coin = $wcp[0]-$amount;
          mssql_query("UPDATE MEMB_CREDITS SET credits='$new_cred' WHERE memb___id='$user_auth_id'");
          mssql_query("UPDATE GameShop_Data SET WCoinC='$new_coin' WHERE MemberGuid='$user_auth_id'");
          echo  msg('1','Exchange was successfull');
        }
  }  
  
  if($changec == 'wcoinp')
  {
       if (!eregi("^[0-9\]{1,11}$", $amount))
        { 
          echo  msg('0','Wrong value');
        }
        elseif ($amount > $wcp[1] )
        {
          echo  msg('0','Not enough WCoinP');
        }
        elseif (($amount % $cred_wp) != 0)
        {
          echo  msg('0','Enter value what can be divided by '.$cred_wp.'');  
        }
        else
        {
          $new_cred = ($amount/$cred_wp)+$kredit[0];
          $new_coin = $wcp[1]-$amount;
          mssql_query("UPDATE MEMB_CREDITS SET credits='$new_cred' WHERE memb___id='$user_auth_id'");
          mssql_query("UPDATE GameShop_Data SET WCoinP='$new_coin' WHERE MemberGuid='$user_auth_id'");
          echo  msg('1','Exchange was successfull');
        }
  }  
  
  if($changec == 'cred_gp')
  {
       if (!eregi("^[0-9\]{1,11}$", $amount))
        { 
          echo  msg('0','Wrong value');
        }
        elseif ($amount > $wcp[2] )
        {
          echo  msg('0','Not enough GoblinPoint');
        }
        elseif (($amount % $cred_gp) != 0)
        {
          echo  msg('0','Enter value what can be divided by '.$cred_gp.'');  
        }
        else
        {
          $new_cred = ($amount/$cred_gp)+$kredit[0];
          $new_coin = $wcp[2]-$amount;
          mssql_query("UPDATE MEMB_CREDITS SET credits='$new_cred' WHERE memb___id='$user_auth_id'");
          mssql_query("UPDATE GameShop_Data SET WCoinG='$new_coin' WHERE MemberGuid='$user_auth_id'");
          echo  msg('1','Exchange was successfull');
        }
  }
  
  if($changec == 'cred_zen')
  {
       if (!eregi("^[0-9\]{1,11}$", $amount))
        { 
          echo  msg('0','Wrong value');
        }
        elseif ($amount > $purse[0] )
        {
          echo  msg('0','Not enough Zen');
        }
        elseif (($amount % $cred_zen) != 0)
        {
          echo  msg('0','Enter value what can be divided by '.$cred_zen.'');  
        }
        else
        {
          $new_cred = ($amount/$cred_zen)+$kredit[0];
          $new_zen = $purse[0]-$amount;
          mssql_query("UPDATE MEMB_CREDITS SET credits='$new_cred' WHERE memb___id='$user_auth_id'");
          mssql_query("UPDATE MEMB_INFO SET memb_zen='$new_zen' WHERE memb___id='$user_auth_id'");
          echo  msg('1','Exchange was successfull');
        }
  }    
}

$cred =  mssql_query("SELECT credits FROM MEMB_CREDITS WHERE memb___id='$user_auth_id'");
$kredit = mssql_fetch_array($cred);
$mon = mssql_query("SELECT memb_zen FROM MEMB_INFO WHERE memb___id='$user_auth_id'");
$money = mssql_fetch_array($mon);
$www = mssql_query("SELECT WCoinC,WCoinP,WCoinG FROM GameShop_Data WHERE MemberGuid='$user_auth_id'");
$wcp = mssql_fetch_array($www);

echo '<br><b>Credits: '.number_format($kredit[0]).'</b><br>';
echo '<b>Web bank: '.number_format($money[0]).'</b><br>';
echo '<b>WCoinC: '.number_format($wcp[0]).'</b><br>';
echo '<b>WCoinP: '.number_format($wcp[1]).'</b><br>';
echo '<b>GoblinPoint: '.number_format($wcp[2]).'</b><br><br>';
?>


<form action="" method="post" onsubmit="request("form_vip","sh_","POST","getpage.php?cat=EX-change"); return false;">
<table>
<tr>
<td>
<b>Exchange CREDITS for</b>
</td>
<td align="right"> 
<select class="iRg_input" style="width: 100px" name="change"> 
          <option value="coin" selected>WCoinC</option> 
          <option value="coinp">WCoinP</option> 
          <option value="gp">GoblinPoint</option> 
          <option value="zen">Zen</option>
          <!--<option value="joc">JoC</option>-->
</select>
</td>
</tr>
<tr>
<td><b>Credits to Exchange</b>
</td>
<td align="right"><input type="text" class="iRg_input" size="11" maxlength="11" name="cred_amount" value="0" />
</td>
</tr>
<tr><td><input type="submit" class="button-gray" name="movecred" value="Exchange Credits" /></td></tr>
</table>
<br><br>

<table>
<tr>
<td>
<b>Exchange CURRENCY for CREDITS</b>
</td>
<td align="right"> 
<select class="iRg_input" style="width: 100px" name="changec"> 
          <option value="wcoinc" selected>WCoinC</option> 
          <option value="wcoinp">WCoinP</option> 
          <option value="cred_gp">GoblinPoint</option> 
          <option value="cred_zen">Zen</option>
          <!--<option value="joc">JoC</option>-->
</select>
</td>
</tr>
<tr>
<td><b>Amount to exchange</b>
</td>
<td align="right"><input type="text" class="iRg_input" size="11" maxlength="11" name="coin_amount" value="0" />
</td>
</tr>
<tr><td><input type="submit" class="button-gray" name="movecoin" value="Exchange Currency" /></td></tr>
</table>
<br><br>

<i>*Note:<br>
Limit of Web Bank is 10.000.000.000 Zen.<br>
<font color="yellow" ><i>*Exchange prices:<br>
Credit : WCoinC &nbsp;&nbsp;&nbsp; 1:<?echo $Wcoin;?><br>
Credit : WCoinP &nbsp;&nbsp;&nbsp; 1:<?echo $Wcoin;?><br>
Credit : GoblinPoint &nbsp;&nbsp;&nbsp; 1:<?echo $gp;?><br>
Credit : Zen &nbsp;&nbsp;&nbsp; 1:<?echo number_format(25000000);?><br>
WCoinC : Credit &nbsp;&nbsp;&nbsp; <?echo $cred_wc;?>:1<br>
WCoinP : Credit &nbsp;&nbsp;&nbsp; <?echo $cred_wp;?>:1<br>
GoblinPoint : Credit &nbsp;&nbsp;&nbsp; <?echo $cred_gp;?>:1<br>
Zen : Credit &nbsp;&nbsp;&nbsp; <?echo number_format(50000000);?>:1</font></i>

[MentaL]

[cryy]

$get_guid = mssql_query('SELECT memb_guid FROM MEMB_INFO WHERE memb___id = \''.$user_auth_id.'\'');
$guid = mssql_fetch_assoc($get_guid);
$www = mssql_query('SELECT WCoinC,WCoinP,WCoinG FROM GameShop_Data WHERE MemberGuid = \''.$guid['memb_guid'].'\''); 

[clerigz]

@cryy bro where i can add that code or what code will be deleted?