<?php
//this needs to be on the login page as well as on all others.
if (!session_is_registered("uid"))
{
    session_register($uid);
}

//user session info, UID
$_SESSION['uid'] = $uid;


$username="webuser";
$password="";
$database="assassin";
//connection line
$connected = mysql_connect(localhost,$username,$password);
if (!$connected) {
    die('Could not connect: ' . mysql_error());
}

//selects database
mysql_select_db($database, $connected) or die('Unable to select database: ' . $mysql_error());

$enteredpin = $_POST['Pin'];
$query = "update users set dead = 1 where pin = '$enteredpin'";
mysql_query($query);

//assign new target
$query2 = "SELECT targetuid FROM users WHERE pin = '.$enteredpin';";
$targetuid_found = mysql_select($query2);
if ($targetuid_found !== 2)
{
die('Could not find Target in database!'. mysql_error());
}
else
{
print "Death Noted.";
$query3 = "UPDATE users SET targetuid = '".$targetuid_found."' WHERE uid = '".$_SESSION['uid']."'";
mysql_query($query3);
}

?>