tambahuser().php

<?php
// Script by Sebastian Wirajaya Licensed
session_start();
if(!isset($_SESSION['username'])) {
header('location:login.php'); }
else { $username = $_SESSION['username']; }
require_once("../koneksi.php");
$query = mysql_query("SELECT * FROM user WHERE username = '$username'");
$hasil = mysql_fetch_array($query);
?>
<?php
  require_once("../koneksi.php");
  $username1 = $_POST['username'];
  $password = $_POST['password'];
  $nama = $_POST['nama'];
  $facebook = $_POST['facebook'];
  $level = $_POST['level'];
if ($level == MemberFree) {
$harga = 0;
$bonus = 0;
} else if ($level == Member) {
$harga = 7500;
$bonus = 5000;
} else if ($level == MemberVip) {
$harga = 15000;
$bonus = 10000;
} else if ($level == Reseller) {
$harga = 30000;
$bonus = 25000;
} else if ($level == Agen) {
$harga = 40000;
$bonus = 20000;
} else {
$tiket = a;
}
  if ($hasil['saldo'] < $harga) { ?>
<div class="alert alert-danger">
Gagal : Saldo tidak mencukupi. Harap Isi Saldo Dulu Ya Ke Admin
</div>
<? } else {
  $cekuser = mysql_query("SELECT * FROM user WHERE username = '$username1'");
  if(mysql_num_rows($cekuser) <> 0) { ?>
<div class="alert alert-danger">
Gagal : Username sudah terdaftar.
</div>
<? } else if(!$username1 || !$password || !$nama) { ?>
<div class="alert alert-danger">
Gagal : Masih ada data yang kosong.
</div>
<? } else {
 $simpan = mysql_query("INSERT INTO user(facebook,username, password, nama, level, saldo, uplink) VALUES('$facebook','$username1', '$password', '$nama', '$level', '$bonus','$username')");
 $simpan = mysql_query("UPDATE user SET saldo=saldo-$harga WHERE username = '$username'");
 if($simpan) { ?>
<div class="alert alert-success"><center>
=== Tambah Anggota ===<br />
-> Pendaftaran anggota baru sukses.<br />
-> Nama : <?php echo $nama; ?> <br />
-> Username : <?php echo $username1; ?> <br />
-> Password : <?php echo $password; ?> <br />
-> FBID : <?php echo $facebook; ?> <br />
-> Level : <?php echo $level; ?> <br />
-> Bonus Saldo : <?php echo $bonus; ?> <br />
-> Didaftarkan Oleh : <?php echo $username; ?> <br />
-> Link : http://tools.ahmadaldiputera.id/<br />
=== Tambah Anggota === <br />
</center></div>
<? } else { ?>
ERROR
<? }
?>
<? }
}
?>