$_SESSION...

[Hitman]

Hmm, hey.

I have this code (below) and it basically redeems voucher codes, anyway when I redeem one it:

a) changes my name to 1 (changes $_SESSION['logged_user'] from Tom to 1)
b) says the code isn't valid

If I vists redeem.php (the code below) it automatically changes my username to 1. >_> not in the db just the session. o.O

It worked (redeeming) then broke.


<?php
session_start();
include 'config.php';
$code = clean($_POST['code']);
$usedby = $_SESSION['logged_user'];

if ($_SESSION['logged_user'] = true) {
if ($_POST['submit']) {
$checkcode = mysql_query("SELECT * FROM `codes`");
$check = mysql_fetch_object($checkcode);

if($check->code == $code) {
$query = mysql_query("SELECT `amount` FROM `codes` WHERE `code` = '$code'");
$rows = mysql_fetch_array($query);
$amount = $rows['amount'];
$query = mysql_query("SELECT `credits` FROM `users` WHERE `username` = '$usedby'");
$rows = mysql_fetch_array($query);
$credits = $rows['credits'];
$newcredits = $amount + $credits;
$update = mysql_query("UPDATE `users` SET `credits` = '$newcredits' WHERE `username` = '$usedby'");
echo "Credit code redeemed! You now have $newcredits! Your name: $usedby";

} else {
echo "Code isn't valid.";
}
} else {
echo "<form action=\"redeem.php\" method=\"POST\">
Enter code: <input type=\"text\" size=\"16\" maxlength=\"12\" name=\"code\">
</br>
<input type=\"submit\" name=\"submit\" value=\"Redeem!\">";

}
} else {
echo "Not logged in!";
}

?>What's up?

[Hitman]

Fixed, was missing a single = ...ruined the script haha!