Find
$result = mysql_query("UPDATE `users` SET `money` = '".$newmoney."',`hospital` = '20' WHERE (`userid`=".$ir['userid'].")", $c) or die(mysql_error());
Replace with:
$result = mysql_query("UPDATE `users` SET `money` = '".$newmoney."',`hospital` = '20', `hospreason` = 'Lost to ".$attack_person['username']."' WHERE (`userid`=".$ir['userid'].")", $c) or die(mysql_error());
Find
$result = mysql_query("UPDATE `users` SET `money` = ".$newmoney.", `hospital` = 10 WHERE (`userid`=".$attack_person['userid'].")", $c) or die(mysql_error());
Replace with:
$result = mysql_query("UPDATE `users` SET `money` = ".$newmoney.", `hospital` = 10, `hospreason` = 'Attacked by ". $ir['username'] ."' WHERE (`userid`=".$attack_person['userid'].")", $c) or die(mysql_error());