Crimz Admin Paneel & Kraak De kluis

<?
$query = mysql_query("SELECT * FROM `crimz_casino`");
$casino = mysql_fetch_object($query);
if ($_POST["post"]) {
if ($data->credits < 1) { echo "Je hebt niet genoeg credits."; return; } else {
if ($_POST["code1"] == $casino->kluis2_1 && $_POST["code2"] == $casino->kluis2_2 && $_POST["code3"] == $casino->kluis2_3) {
echo "Ja! De code was goed! <b>Je wint de pot van ".$casino->kluis2_4." credits en 500 EXP!<br><i>De code is weer gereset.</i>";
$r1 = rand(0,9);
$r2 = rand(0,9);
$r3 = rand(0,9);
mysql_query("UPDATE `crimz_leden` SET `credits`=`credits`+$casino->kluis2_4, `exp`=`exp`+500 WHERE `login`='$data->login'");
mysql_query("UPDATE `crimz_casino` SET `kluis2_1`=$r1, `kluis2_2`=$r2, `kluis2_3`=$r3, `kluis2_4`=50");
return;
} else {
echo "Jammer, de code was fout. Probeer het opnieuw!";
mysql_query("UPDATE `crimz_leden` SET `credits`=`credits`-1 WHERE `login`='$data->login'");
mysql_query("UPDATE `crimz_casino` SET `kluis2_4`=`kluis2_4`+1");
return;
}
}
}
?>
<p>Probeer de grote kluis te kraken en win de pot! Elke keer als je de kruis wil proberen te kraken moet je 1 credit aan de pot toevoegen.</p>
<img src="images/safe.png" alt="" style="float:right;">
<p><h2>Pot: <em><? echo $casino->kluis2_4; ?> Credits</em> &amp; <em>500 EXP</em></h2>
<table class="lijst">
<tr><td><form method="post">
<select name="code1">
<option>0</option>
<option>1</option>
<option>2</option>
<option>3</option>
<option>4</option>
<option>5</option>
<option>6</option>
<option>7</option>
<option>8</option>
<option>9</option>
</select>
</td><td>
<select name="code2">
<option>0</option>
<option>1</option>
<option>2</option>
<option>3</option>
<option>4</option>
<option>5</option>
<option>6</option>
<option>7</option>
<option>8</option>
<option>9</option>
</select>
</td><td>
<select name="code3">
<option>0</option>
<option>1</option>
<option>2</option>
<option>3</option>
<option>4</option>
<option>5</option>
<option>6</option>
<option>7</option>
<option>8</option>
<option>9</option>
</select>
</td>
<td>
<input type="submit" name="post" value="Try!">
</form>
</td>
</tr>
</table>