Untitled

<?php
error_reporting(E_ALL);
$server="192.168.1.14";
$user="root";
$pass="iacopo9000";
$connect=mysql_connect($server, $user, $pass);
if (!$connect) {
echo "Failed to connect to MySQL DB: ".mysql_error();
die();
}

$scelta = $_GET['scelta'];
print "<html>
<head>
<title>Tool Ban/Sban-Created By skerno</title>
</head>
<body>
<center><h2>Tool Ban/Sban By skerno A.K.A i0wn</h></center>
<form method=\"post\" action=\"?scelta=1\"
Nick:<br>
<input type=\"text\" name=\"nick\">
<input type=\"submit\" value=\"Ban!\"><br>
<hr>
<form method=\"post\" action=\"?scelta=2\"
Id:<br>
<input type=\"text\" name=\"id\">
<input type=\"submit\" value=\"UnBan!\">
</body>
<html>";
if (isset($_POST['nick']) && isset($_POST['id']) && $scelta==1) {
$nick=$_POST['nick'];
ban($nick,$connect);
}
if (isset($_POST['nick']) && isset($_POST['id']) && $scelta==2) {
$id=$_POST['id'];
unban($id,$connect);
}
if (isset($_POST['nick']) && isset($_POST['id']) && $scelta>2 or $scelta <0) {
echo "Scelta invalida!";
}
//Functions
function ban($nick,$connect){
    $query="UPDATE account SET status='Banned' WHERE login='".$nick."'";
    mysql_select_db("account");
    mysql_real_escape_string(mysql_query($query)) || die("Failed to perform specified query: ".mysql_error());
    print "<br><br><center>Account Banned!</center>";
    mysql_close($connect);
}
function unban($id,$connect){
    $query="UPDATE account SET status='OK' WHERE id='".$id."'";
    mysql_select_db("account");
    mysql_real_escape_string(mysql_query($query)) || die("Failed to perform specified query: ".mysql_error());
    print "<br><br><center>Account UnBanned!</center>";
    mysql_close($connect);
}
?>