votescript

<?php
session_start();
@include('../config/db_conf.php');
$vp = $_POST['vp'];

$conn = mysqli_connect($host, $dbuser, $dbpass, $dbname);

if(isset($_POST['votetest'])) {
    $vote_last_time = "SELECT vote_time FROM tokdev.vote_cooldown WHERE account = '" . $_SESSION['username'] . "'";
    $result = $conn->query($vote_last_time);
    if ($result->num_rows > 0) {
    if($vote_last_time >= time() - 60 * 60 * 12) {
    $new_time = "UPDATE tokdev.vote_cooldown SET vote_time=now() WHERE account = '" . $_SESSION['username'] . "'";
    $addvp = "UPDATE auth.account SET vp = vp+$vp WHERE account = '" . $_SESSION['username'] . "'";
    } else {
        echo "You can't vote now";
    }
}
}