battles/buy_klan.php

<?php
session_start();
if (empty($_SESSION['uid'])) {
    exit;
}
require_once "functions.php";

if (empty($user->getClan())) {
    exit;
}
$is_now = db::c()->query('SELECT `id` FROM `abils_klan` WHERE `klan` = ?i', $user['klan'])->fetch_assoc();
$clan = db::c()->query('SELECT `glava` FROM `clans` WHERE `id` = ?i', $user['klan'])->fetch_assoc();
$cost = [1, 2, 10, 0.50, 0.80, 1, 1, 0.10, 0.20, 4, 0.02, 20, 10, 1, 1];
$mag = ['sleep15', 'sleep30', 'closebattle', 'heal20', 'heal35', 'heal50', 'travmoff', 'attack', 'bloodattack', 'death', 'comment', 'openbattle', 'reamdeath', 'clone', 'unclone'];

function add_klan_abil($ab, $cost)
{
    global $user, $banks;
    $clan = mysql_fetch_array(mysql_query('SELECT `id`, `glava` FROM `clans` WHERE `id` = "' . $user['klan'] . '"'));
    if (isset($ab) && $banks['ekr'] >= $cost && $clan['glava'] == $user['id']) {
        $isset = mysql_fetch_array(mysql_query('SELECT `id`, `' . $ab . '` FROM `abils_klan` WHERE `klan` = "' . $user['klan'] . '"'));
        $isset[$ab] += 1;
        mysql_query('UPDATE `abils_klan` SET `' . $ab . '` = "' . $isset[$ab] . '" WHERE `klan` = "' . $user['klan'] . '"');
        $banks['ekr'] -= $cost;
        mysql_query('UPDATE `bank` SET `ekr` = "' . $banks['ekr'] . '" WHERE `id` = "' . $user['id'] . '"');
        return true;
    }
    return false;
}

if (isset($_POST['type'], $_POST['user'])) {
    if (isset($user['id'])) {
        $price = $cost[$_POST['type'] - 21];
        $abil = $mag[$_POST['type'] - 21];
        if (isset($banks['id'])) {
            if ($banks['ekr'] >= $price && $user['id'] == $clan['glava']) {
                if (isset($is_now['id'])) {
                    if ($user['battle'] == 0) {
                        if (add_klan_abil($abil, $price)) {
                            echo 'success';
                        } else {
                            echo 'Error';
                        }
                    } else {
                        echo 'Не в бою ...';
                    }
                } else {
                    echo 'NULL';
                }
            } elseif ($user['id'] != $clan['glava']) {
                echo 'Вы не глава клана';
            } else {
                echo 'Не хватает средств';
            }
        } else {
            echo '<small>Выберите счёт в банке</small>';
        }
    } else {
        echo "Вы не авторизированы ...";
    }
}