[Share] PHP For "Account Being Connected"

PHP Code:

<?php
require("config.php");


$error=1;
if($_POST['lostpassword']=='Buy') {

$error = 2;
$account_id = stripslashes($_SESSION['user']);
$Nation = stripslashes($_POST['nation']);
$query = "SELECT header from RanUser.dbo.Web";
$result = $db->Execute($query);
$row = $result->fetchrow();
$idcode = (int)$_POST['idcode'];
$name = stripslashes($_POST['name']);
$row = $result->fetchrow();
$Cost = 150;
$result = mssql_query ("SELECT UserPoint FROM RanUser.dbo.UserInfo Where Username = '$account_id'");
$rows=mssql_num_rows($result);


}
if($error==1) {
$query = "SELECT resetmoney,resetlevel,resetslimit,reset_skill,reset_quest,reset_stat,clean_skills from RanUser.dbo.Web";
$result = $db->Execute($query);
$row = $result->fetchrow();
$login = stripslashes($_SESSION['user']);
$comanda1="SELECT UserNum from RanUser.dbo.UserInfo where Username = '$login' ";
$rezultat2=mssql_query($comanda1) or die("Can`t be executed");
while($r2=mssql_fetch_array($rezultat2)){
$Usernum = $r2["UserNum"];







}


echo "<center><form name='lostpassword' action='' method='post' onsubmit='return checkform1()' autocomplete='off'>
<table CELLSPACING=0 BORDER=0 CELLPADDING=0 align=CENTER>
<tr>
<td width=170 align=right>
<font size=2><b><img src='images/point_b.gif'/> UserName: &nbsp;&nbsp;
</td>
<td>
<select style='background: #ea6fc4; font: 11px verdana, sans-serif; color:#eee;'>";



{
$account_id = stripslashes($_SESSION['user']);
echo('
<option value='.$account_id.'>'.$account_id.'</option>
');

}

echo "
</select>
</td>
</tr>



<table>
<tr align=center><input type=hidden name=lostpassword value='Buy'>

</td></tr><tr><center><br><input type='Submit' name='submit' value='Submit' /><br><br>

</form></table>

";
}
if($error==2) {
$account_id = stripslashes($_SESSION['user']);
$Usernum = ($UserNum);
$Alz = ($Alz);
$query = "SELECT header from RanUser.dbo.Web";
$result = $db->Execute($query);
$row = $result->fetchrow();
$Nation = stripslashes($_POST['nation']);
$name = stripslashes($_POST['name']);
$idcode = (int)$_POST['idcode'];



mssql_query("UPDATE Userinfo SET UserLoginState = '0' WHERE Username = '$account_id' ");
mssql_query("UPDATE Userinfo SET UserAvailable = '1' WHERE Username = '$account_id' ");





echo '<center>Reset Account "User Account is Being Connected" Fixed.</center>';
$error = 1;





}


?>