Store

<?php
session_start();
@include('../config/db_conf.php');
$soapUsername = 'tok124';
$soapPassword = '126126';
$soapHost = '127.0.0.1';
$soapPort = '7878';
$char = $_POST['char'];
$item = $_POST['item'];

$conn = new mysqli($host, $dbuser, $dbpass, $authdb);

$test = "SELECT points FROM test.azer_items WHERE item_entry = $item";
$testresult = $conn->query($test);

if ($testresult->num_rows > 0) {
    // output data of each row
    while($row = $testresult->fetch_assoc()) {
        $dp = $row['points'];
    }
} else {
}

    $client = new SoapClient(NULL, array(
        'location' => "http://$soapHost:$soapPort/",
        'uri'      => 'urn:TC',
        'style'    => SOAP_RPC,
        'login'    => $soapUsername,
        'password' => $soapPassword,
    ));

$select = "SELECT dp FROM account WHERE username = '" . $_SESSION['username'] . "' AND dp >= $dp";
$result = $conn->query($select);

if ($result->num_rows > 0) {

    $sql = "UPDATE account SET dp=dp-$dp WHERE username = '" . $_SESSION['username'] . "'";

    if ($conn->query($sql) === TRUE) {
        $testquery = "INSERT INTO test.azer_items_log (account, item, status)
        VALUES ('" . $_SESSION['username'] . "', '$item','Success')";
        if(mysqli_query($conn, $testquery)){
        }else{
        }
        $command = "send items $char \"Donor Item\" \"Thank your for supporting our server !\" $item";
        $result = $client->executeCommand(new SoapParam($command, 'command'));
    } else {
        $testquery = "INSERT INTO test.azer_items_log (account, item, status)
        VALUES ('" . $_SESSION['username'] . "', '$item','Unsuccessful')";
        if(mysqli_query($conn, $testquery)){
        }else{
        }
    }
    header('location: ../?p=home');
} else {
    echo "Sorry, You don't have enough points";
    header('refresh:2; ../?p=home');
}
?>