votefunction.php

<?php
session_start();
include('../config/db_conf.php');
$conn = mysqli_connect($host, $dbuser, $dbpass, $dbname);
$vp = "10";
if(isset($_SESSION['username'])) {
$select = "SELECT vote_time FROM vote_cooldown WHERE account = '" . $_SESSION['username'] . "'";
$result = mysqli_query($conn, $select);
if (mysqli_num_rows($result) > 0) {
    //Function to add if a row exist
    while($row = mysqli_fetch_assoc($result)) {

        $votetime = $row['vote_time'];
        $time = time();

        if($time >= $votetime+43200) {
            $update = "UPDATE vote_cooldown SET vote_time='$time' WHERE account='" . $_SESSION['username'] . "'";
            if (mysqli_query($conn, $update)) {
                echo "successfully added new time<br>";
            }else{
                echo "Failed to add new time" . mysqli_error($conn);
            }
            $updatevp = "UPDATE auth.account SET vp=vp+$vp WHERE username='" . $_SESSION['username'] . "'";
            if (mysqli_query($conn, $updatevp)) {
                echo "Successfully added vp to account " . $_SESSION['username'] . "";
            }else{
                echo "Failed to add vp to account " . $_SESSION['username'] . "";
            }
        }else{
            echo "You have already voted !";
        }

    }

}else{
    $inserttime = time();
    $insert = "INSERT INTO vote_cooldown (voted, account, vote_time)
    VALUES('1', '" . $_SESSION['username'] . "', '$inserttime')";
    if (mysqli_query($conn, $insert)) {}else{}
    $newupdate = "UPDATE auth.account SET vp=vp+$vp WHERE username='" . $_SESSION['username'] . "'";
    if (mysqli_query($conn, $newupdate)) {
        echo "successfully added new time<br>";
    }else{
        echo "Failed to add new time" . mysqli_error($conn);
    }
}
}else{
    echo "You need to login to be able to vote !";
}