Untitled

<html>
	<head>
		<title>Edit player</title>
		<style>
		table, th, td {
			border: 1px solid black;
		}
		</style>
	</head>
		<form method="post">
			<input type="hidden" name="player_id" value="<?php echo $_GET["player_id"]; ?>" />
			<input type="submit" name="ban" id="ban" value="Ban" /><br />
		</form>
	<body>
		</script>
		<?php
			$servername = "localhost";
			$username = "root";
			$password = "12345678";
			$dbname = "auroris";

			$data["player_id"] = $_POST["player_id"];
			// $player_id = htmlspecialchars($_GET["player_id"]);

			$conn = mysqli_connect($servername, $username, $password, $dbname);
			if($conn->connect_error) {
				die("Connection failed: " . $conn->connect_error);
			}

			$sql = "SELECT * FROM penguins WHERE ID = " . $data["player_id"];
			$result = $conn->query($sql);

			if($result->num_rows > 0) {
				echo "<table><tr><th>ID</th><th>Name</th><th>Password</th><th>Coins</th><th>Banned</th><th>LoginIPs</th></tr>";
				while($row = $result->fetch_assoc()) {
					echo "<tr><td>" . $row["ID"] . "</td><td>" . $row["Username"] . "</td><td>" . $row["Password"] . "</td><td>" . $row["Coins"] . "</td><td>" . $row["Banned"] . "</td><td>" . $row["LoginIPs"] . "</td></tr>";
				}
				echo "</table>";
			}
			function ban($player_id) {
				$timestamp = time() + (24 * 60 * 60);
				$sql = "UPDATE penguins SET Banned = " . $timestamp . " WHERE ID = " . $data["player_id"] . ";";
				echo $sql;

				mysqli_query($conn, $sql);
			}
			if(isset($_POST["ban"])) {
				ban($data["player_id"]);
			}
		?>
	</body>
</html>