Hello , I recently bought a Facebook app form a person on digital point and I just found out the bank.php file has an error in it, I don't know where but when you put a - in front of a withdrawal amount it will give you the amount of money no mater what amount of money you have in the bank, kind of like the mafia wars glitch, i have pasted the bank.php code bellow if someone will look at it and trey to help me I would appreciate it.
<?php
require_once 'top.php';
?>
<div class=mainback>
<div class=middlebox>
<P><a href=<?php echo $appCanvasUrl; ?>>[Back to Main Menu]</a></P>
<BR>
<?php
if( isset($_POST[submitB]) || isset($_POST[submitD]) || isset($_POST[submitW])) {
echo $status;
}
?>
<P class=veryBigWhiteP>The Bank</P>
<P>Open a bank account with the minimum balance seen below. A 10% safehouse fee will be taken out of all incoming funds. Once your account is opened, you must maintain a minimum balance of $2000. Money kept in the bank cannot be stolen by other gangsters.</P>
<BR>
<?php
$res = query("SELECT COUNT(*) FROM `cu_bank` WHERE `userid`=$user");
list($total_row) = mysql_fetch_array($res);
if( $total_row > 0 ) {
$res = query("SELECT * FROM `cu_bank` WHERE `userid`=$user");
while( $row = mysql_fetch_array($res) ) {
echo '<P class=titleP>Your balance: '. number_format($row[bamount],2) .'</P><BR>';
}
echo '<form action=bank.php method=POST>';
echo '<P>Deposit: <input type=text name=damount size=20 value=0> <input type=submit name=submitD value="Deposit"></P>';
echo '</form>';
echo '<BR>';
echo '<form action=bank.php method=POST>';
echo '<P>Withdraw: <input type=text name=wamount size=20 value=0> <input type=submit name=submitW value="Withdraw"></P>';
echo '</form>';
}
else {
echo '<form action=bank.php method=POST>';
echo '<P>Initial Balance: <input type=text name=amount size=20 value=10000> <input type=submit name=submitB value="Open Account"></P>';
echo '</form>';
}
?>
<BR>
</div>
</div>