Hospital Items

[gangstas-conflict]

I'm having problems with getting hospital items to take time off. Could anyone check my code and let me know whats wrong?

Thanks

 

<?php
/*-----------------------------------------------------
-- Mono Country v1.0 BETA
-- A product of DBS-entertainment
-- Copyright held 2005 by Dabomstew
-- INDEX.php
-----------------------------------------------------*/
session_start();
require "global_func.php";
if($_SESSION['loggedin']==0) { header("Location: login.php");exit; }
$userid=$_SESSION['userid'];
require "header.php";
$h = new headers;
$h->startheaders();
include "mysql.php";
global $c;
$is=mysql_query("SELECT u.*,us.* FROM users u LEFT JOIN userstats us ON u.userid=us.userid WHERE u.userid=$userid",$c) or die(mysql_error());
$ir=mysql_fetch_array($is);
check_level();
$fm=money_formatter($ir['money']);
$cm=money_formatter($ir['crystals'],'');
$lv=date('F j, Y, g:i a',$ir['laston']);
$h->userdata($ir,$lv,$fm,$cm);
$h->menuarea();
$_GET['ID'] = abs((int) $_GET['ID']);
//Food
if(!$_GET['ID'])
{
print "Invalid use of file";
}
else
{
$i=mysql_query("SELECT iv.*,i.*,it.* FROM inventory iv LEFT JOIN items i ON iv.inv_itemid=i.itmid LEFT JOIN itemtypes it ON i.itmtype=it.itmtypeid WHERE iv.inv_id={$_GET['ID']} AND iv.inv_userid=$userid",$c);
if(mysql_num_rows($i) == 0)
{
print "Invalid item ID";
}
else
{
$r=mysql_fetch_array($i);
if($r['itmtypename'] == 'Food')
{
$f=mysql_query("SELECT * FROM food WHERE item_id={$r['itmid']}",$c);
$fr=mysql_fetch_array($f);
mysql_query("UPDATE inventory SET inv_qty=inv_qty-1 WHERE inv_id={$_GET['ID']}",$c);
mysql_query("DELETE FROM inventory WHERE inv_qty=0",$c);
mysql_query("UPDATE users SET energy=energy+{$fr['energy']} WHERE userid=$userid");
mysql_query("UPDATE users SET energy=maxenergy WHERE energy > maxenergy");
print "You cram a {$r['itmname']} into your mouth. You feel a bit of energy coming back to you.";
}
else if($r['itmtypename'] == 'Medical')
{
$f=mysql_query("SELECT * FROM medical WHERE item_id={$r['itmid']}",$c);
$fr=mysql_fetch_array($f);
mysql_query("UPDATE inventory SET inv_qty=inv_qty-1 WHERE inv_id={$_GET['ID']}",$c);
mysql_query("DELETE FROM inventory WHERE inv_qty=0",$c);
mysql_query("UPDATE users SET hp=hp+{$fr['health']} WHERE userid=$userid");
mysql_query("UPDATE users SET hp=maxhp WHERE hp > maxhp");
if($r['itmname'] == 'Full Restore')
{
mysql_query("UPDATE users SET energy=maxenergy,will=maxwill,brave=maxbrave WHERE userid=$userid",$c);
}
if($r['itmname'] == 'Will Potion')
{
mysql_query("UPDATE users SET will=maxwill WHERE userid=$userid",$c);
}
print "You spray a {$r['itmname']} into your mouth. You feel a bit of Health coming back to you.";
}
}
else if($r['itmtypename'] == 'Hospital')
{
$f=mysql_query("SELECT * FROM medical WHERE item_id={$r['itmid']}",$c);
$fr=mysql_fetch_array($f);
mysql_query("UPDATE inventory SET inv_qty=inv_qty-1 WHERE inv_id={$_GET['ID']}",$c);
mysql_query("DELETE FROM inventory WHERE inv_qty=0",$c);
mysql_query("UPDATE users SET hp=hp+{$fr['health']} WHERE userid=$userid");
mysql_query("UPDATE users SET hp=maxhp WHERE hp > maxhp");
if($r['itmname'] == 'Full Restore')
{
mysql_query("UPDATE users SET energy=maxenergy,will=maxwill,brave=maxbrave WHERE userid=$userid",$c);
}
if($r['itmtypename'] == 'Hospital')
{
$stat="Health";
$f=mysql_query("SELECT * FROM medical WHERE item_id={$r['itmid']}",$c);
$fr=mysql_fetch_array($f);
mysql_query("UPDATE inventory SET inv_qty=inv_qty-1 WHERE inv_id={$_GET['ID']}",$c);
mysql_query("DELETE FROM inventory WHERE inv_qty=0",$c);
mysql_query("UPDATE users SET hp=hp+{$fr['health']} WHERE userid=$userid";
maxhp");
mysql_query("UPDATE users SET hospital=hospital-100 WHERE userid=$userid",$c);
}
if($r['itmname'] == 'Small First Aid kit')
{
mysql_query("UPDATE users SET hospital=hospital-50 WHERE userid=$userid",$c);
}
if($r['itmname'] == 'First Aid Kit')
{
mysql_query("UPDATE users SET hospital=hospital-75 WHERE userid=$userid",$c);
}
if($r['itmname'] == 'Morphine')
{
mysql_query("UPDATE users SET hospital=hospital-100 WHERE userid=$userid",$c);
}

echo 'You use a '.$r['itmname'].'. You feel a bit of '.$stat.' coming back to you.';
mysql_query("UPDATE users SET hospital=0 WHERE hospital<0", $c);
}
}


//Hospital
if(!$_GET['ID'])
{
print "Invalid use of file";
}
else
{
$i=mysql_query("SELECT iv.*,i.*,it.* FROM inventory iv LEFT JOIN items i ON iv.inv_itemid=i.itmid LEFT JOIN itemtypes it ON i.itmtype=it.itmtypeid WHERE iv.inv_id={$_GET['ID']} AND iv.inv_userid=$userid",$c);
if(mysql_num_rows($i) == 0)
{
print "Invalid item ID";
}
else
{
$r=mysql_fetch_array($i);Hospital'
if($r['itmtypename'] == 'Hospital')
{
$f=mysql_query("SELECT * FROM food WHERE item_id={$r['itmid']}",$c);
$fr=mysql_fetch_array($f);
mysql_query("UPDATE inventory SET inv_qty=inv_qty-1 WHERE inv_id={$_GET['ID']}",$c);
mysql_query("DELETE FROM inventory WHERE inv_qty=0",$c);
mysql_query("UPDATE users SET hospital=hospital-100 WHERE userid=$userid",$c);
mysql_query("UPDATE users SET energy=maxenergy WHERE energy > maxenergy");
print "You cram a {$r['itmname']} into your mouth. You knock 100 minutes off of your hospital time.";
}
$h->endpage();
?>