case 'redeem':
if(!$user) exit(json_encode(array('success'=>false, 'error'=>'You must login to access the redeem.')));
if($user['referral'] != '0') exit(json_encode(array('success'=>false, 'error'=>'You have already redeemed a code. Only 1 code allowed per account.', 'code'=>$user['referral'])));
$out = curl('http://api.steampowered.com/IPlayerService/GetOwnedGames/v0001/?key=C59002C6AF973D43E01CF7A4EC5EF3D9&steamid='.$user['steamid'].'&format=json');
$out = json_decode($out, true);
if(!$out['response']) exit(json_encode(array('success'=>false, 'error'=>'You profile is private')));
$csgo = false;
foreach ($out['response']['games'] as $key => $value) {
if($value['appid'] == 730) $csgo = true;
}
if(!$csgo) exit(json_encode(array('success'=>false, 'error'=>'You dont have CS:GO.')));
$code = $_GET['code'];
if(!preg_match('/^[a-zA-Z0-9]+$/', $code)) {
exit(json_encode(array('success'=>false, 'error'=>'Code is not valid')));
} else {
$sql = $db->query('SELECT * FROM `codes` WHERE `code` = '.$db->quote($code));
if($sql->rowCount() != 0) {
$row = $sql->fetch();
if($row['user'] == $user['steamid']) exit(json_encode(array('success'=>false, 'error'=>'This is you referal code')));
$db->exec('UPDATE `users` SET `referral` = '.$db->quote($row['user']).', `balance` = `balance` + '.$referal_summa.' WHERE `steamid` = '.$db->quote($user['steamid']));
exit(json_encode(array('success'=>true, 'credits'=>$referal_summa)));
} else {
exit(json_encode(array('success'=>false, 'error'=>'Code not found')));
}
}
break;