<?php

if (session_id() == "")
{
   session_start();
}
if (!isset($_SESSION['username']))
{
   $accessdenied_page = '';
   header('Location: '.$accessdenied_page);
   exit;
}


$dbservername = 'localhost';
$dbusername = 'bceus_user';
$dbpassword = 'password';
$dbname = 'bceus_data';
$dbtable = 'details2';
$success_page = '/League.php';
$username = $_SESSION['username'];

$conn = new mysqli($dbservername, $dbusername, $dbpassword, $dbname);
if ($conn->connect_error) {
    die("Connection failed: " . $conn->connect_error);
}
$sql = "SELECT Credit FROM `".$dbtable."` WHERE `username` = `".$username."`";
$result = $conn->query($sql);

if ($result->num_rows > 0) {
    while($row = $result->fetch_assoc()) {
        if ($row['Credit'] < 20) {
            echo "Your Credit is not Enough , Please Buy a Credit";
        }
        else {
           $sql2 = "UPDATE `".$dbtable."` SET Credit = Credit - 20 WHERE `username` = `".$username."`";
           $conn->query($sql2);
        }
    }
} else {
    echo "0 results";
}
$conn->close();
header('Location: '.$success_page);
exit;
?>