The Weird and The Wonderful

<p>This will cost you 9.99 of your coins.
Please acknowledge the transaction by clicking
on "Pay"</p>
<form method="post" action="">
(more stuff)
<input type="hidden" name="amount" value="9.99">
<input type="button" value="Pay">
</form>

$query = "SELECT * FROM user WHERE id = $id";
$res = mysql_query($query);
while($row = mysql_fetch_array($res))
{
  $amount = $row["amount"];
}
$amount = $amount - $_POST[amount];
$query = "UPDATE user SET amount = $amount WHERE id = $id";

$query = mysql_query("SELECT * FROM " . $table . "");
$data = mysql_num_rows($query);

$query2 = mysql_query("SELECT * FROM " . $table . " WHERE status = 'Online'");
$data2 = mysql_num_rows($query2);

$query3 = mysql_query("SELECT * FROM articels");
$data3 = mysql_num_rows($query3);

$query4 = mysql_query("SELECT * FROM user");
$data4 = mysql_num_rows($query4);

$query5 = mysql_query("SELECT * FROM posts");
$data5 = mysql_num_rows($query5);

$query6 = mysql_query("SELECT * FROM url where url !=''");
$data6 = mysql_num_rows($query6);

$loginname = $_POST['loginname'];
$keyEntered = $_POST['key'];
$query = "SELECT * FROM user";

$result = mysql_query($query) or die(mysql_error());

while($row = mysql_fetch_array($result)){

  if ($keyEntered == $row["activator"]){
    $sql="UPDATE user SET activator = '', status='activated' WHERE username = '$loginname'";
    mysql_query($sql);

    $time=time()+ 365*24*60*60;
    setcookie("check", "1",$time);
  }
}

if ($keyEntered != $row["activator"])
{
  $msg2="Invalid key";
}