<?php
$host = '127.0.0.1';
$db = 'messthing';
$user = 'root';
$pass = '';
$charset = 'utf8';

$dsn = "mysql:host=$host;dbname=$db;charset=$charset";
$opt = [
    PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
    PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC,
    PDO::ATTR_EMULATE_PREPARES => false,
];

try {
    $pdo = new PDO($dsn, $user, $pass, $opt);
} catch (PDOException $e) {
    print_r($e);
}

$rfid = $_GET['id'];
$amount = $_GET['amount'];
$number = $_GET['number'];


$stmtPaymentAdd = $pdo->prepare('INSERT INTO `payment` (`user_id`, `amount`, `time`, `number`) VALUES (?, ?,NOW(), ?)');
$stmtPaymentAdd->execute([$rfid, $amount, $number ]);
$stmtUpdateUser = $pdo->prepare("UPDATE user SET  breakfast=breakfast+$number, lunch=lunch+$number, evening=evening+$number, dinner=dinner+$number WHERE rfid = ?");
$stmtUpdateUser->execute([$rfid]);

?>