query('SELECT id, username FROM '.$db->prefix.'users WHERE username=\''.pun_htmlspecialchars($_POST['username']).'\' LIMIT 1'); $user = $db->fetch_assoc($query); if ($pun_user['cm_cash'] < $amount || $amount < 0) message($lang_cash['Not_enough'].' '.$pun_config['cm_cur_name'].'.'); $db->query('UPDATE '.$db->prefix.'users SET cm_cash=cm_cash+'.$amount.' WHERE id='.$user['id'].' LIMIT 1'); $db->query('UPDATE '.$db->prefix.'users SET cm_cash=cm_cash-'.$amount.' WHERE id='.$pun_user['id'].' LIMIT 1'); echo '