Ogame.php

<!-- page loaded for game where it is not the users go !-->
<?php
//startup scripts
 Create connection to database
include 'scripts/sql.php';
//check if its the users go
$result = mysqli_query($con,"SELECT * FROM games WHERE PID = '" . $_GET['gid'] . "'");
    while($row = mysqli_fetch_array($result))
        {
                $GO = $row['go'];
        if ( $GO == $_GET['id']){
                    echo "<script> loadgame();</script>";
                    }
        }
?>
<table style='width:100%;height:100%;'>
<tr><td height='100px'><?php echo "<img width='70px' src='https://graph.facebook.com/" . $GO . "/picture?width=200&height=200' />"; ?></td></tr>
<tr><td>
<?php
// Create connection to database
include 'scripts/sql.php';
//get users win/total
$result = mysqli_query($con,"SELECT * FROM x" . $_GET['gid']);
while($row = mysqli_fetch_array($result))
  {
        echo "<table style='float:left;float:top;width:140px;' ><tr>";
    echo "<td>";
    echo "<img width='70px' src='https://graph.facebook.com/" . $row['id'] . "/picture?width=200&height=200' />";
    //get user's name
    $result1 = mysqli_query($con,"SELECT * FROM Persons WHERE PID = '" . $row['id'] . "'");
    while($row1 = mysqli_fetch_array($result1))
        {
        echo "<li>" . $row1['Firstname'] . " " . $row1['Lastname'] . "</li>";
        }
    echo "<li>$" . $row['Money'] . "</li>";
        echo "</td>";
        echo "</tr></table>";
  }
?>
</td></tr>
</table>