auto stelen!

<?php
echo'
        <div id="content_top"> </div>


        <div id="content">


<h1 class="titel">Auto\'s jatten</h1>';
    $tijd = strtotime($own['autostelen']) - tijd();
  if($tijd > 0) {
    echo'
         <div class="dark"><font color="red" style="font-weight: bold">Je wordt nog gezocht door de politie! Kom over <span id="seconds"></span>
                                                                                                    <script type="text/javascript">
                                                                                                      aftellen(\'' . $tijd . '\', \'seconds\', true, true);
                                                                                                    </script>' . "maar weer terug!</font></div>\r\n";
  } else {
    if(isset($_POST['submit']) && isset($_POST['car'])) {
      $auto = mysql_fetch_query("SELECT kans, naam FROM autos WHERE id = '" . $_POST['car'] . "'");
      $fout = array();
    
      if(empty($auto)) {
        $fout[] = " - Dit is geen auto";
      }


      if(strtoupper(@$_POST['captcha']) != @$_SESSION['teBewaren'] || empty($_POST['captcha'])) {
        $fout[] = " - De code die jij intypte was verkeerd. Het moest '" . @$_SESSION['teBewaren'] . "' zijn";
      }


      if(empty($fout[0])) {
        $kans = $auto['kans'] - (9 - $own['rank']) * 10 - round($own['rank'] * 2);
        if($kans > 96) {
          $kans = 96;
        }
        $getal = rand(1, 100);
        $vord = rand(0, rand(2, rand(3, 4)));
        if($kans >= $getal) {
          $schade = rand(10, 30);
          missiondone(3);
          echo '<div class="dark"><font color="green" style="font-weight: bold">Je hebt een ' . $auto['naam'] . ' met ' . $schade . '% schade gejat!</font></div>';
          mysql_query("INSERT INTO garage (soort, schade, eigenaar) VALUES('" . $_POST['car'] . "', '" . $schade . "', '" . $own['id'] . "')");
          mysql_query("UPDATE users SET autostelen = '" . date("Y-m-d H:i:s", (tijd() + (2 * ($_POST['car'] * 60)))) . "', rankvordering = rankvordering + '" . $vord . "' WHERE id = '" . $own['id'] . "'") or die(mysql_error());
        } else {
          $bajes = rand(0, 6);
          if($_POST['car'] - 2 <= 0) {
            $bajes = 1;
          }
          $minute = ($_POST['car'] - 2 == 1) ? ("minuut") : ("minuten");


          if($bajes == 0) {
            echo '<div class="dark"><font color="red" style="font-weight: bold">Je bent gepakt door de politie en je moet nu ' . ($_POST['car'] - 2) . " " . $minute . ' de bak in!</font></div>';
            mysql_query("UPDATE users SET autostelen = '" . date("Y-m-d H:i:s", (tijd() + (2 * ($_POST['car'] * 60)))) . "', gevangenis = '" . ((tijd() + (($_POST['car'] - 2) * 60))) . "', rankvordering = rankvordering + '" . $vord . "' WHERE id = '" . $own['id'] . "'");
          } else {
            echo '<div class="dark"><font color="red" style="font-weight: bold">Helaas! Het is je niet gelukt een ' . $auto['naam'] . ' te jatten!</font></div>';
            mysql_query("UPDATE users SET autostelen = '" . date("Y-m-d H:i:s", (tijd() + (2 * ($_POST['car'] * 60)))) . "', rankvordering = rankvordering + '" . $vord . "' WHERE id = '" . $own['id'] . "'");
          }
        }
      } else {
        foreach($fout as $tekst) {
          @$foutje .= "<br />\r\n" . $tekst;
        }
        echo "<div class=\"dark\"><font color=\"red\" style=\"font: bold\">De volgende dingen gingen verkeerd:</font>" . $foutje . "</div><br />";
      }
    } elseif(empty($fout[0])) {


    echo '
    <form method="post">
       <table width="100%" cellpadding="0" cellspacing="0">
         <tr>
           <td class="start">Afbeelding</td>
           <td class="start">Naam</td>
           <td class="start">&nbsp;</td>
           <td class="start">Waarde</td>
           <td class="start">&nbsp;</td>
           <td class="start">Kans</td>
           <td class="start">&nbsp;</td>
         </tr>';
         
    $showroom = mysql_query("SELECT * FROM autos");
    while($auto = mysql_fetch_array($showroom, MYSQL_ASSOC)) {
      $kans = $auto['kans'] - (9 - $own['rank']) * 10 - round($own['rank'] * 2);
      if($kans > 96) {
        $kans = 96;
      }


      if($kans < 0) {
        $kans = 0;
      }
      echo '
         <tr>
           <td class="shop"><img src="images/autos/' . $auto['afbeelding'] . '"></td>
           <td class="shop">' . $auto['naam'] . '</td>
           <td class="shop"><img src="images/icons/money.gif" /></td>
           <td class="shop">&euro; ' . groot($auto['waarde']) . ',-</td>
           <td class="shop"><img src="images/icons/chart_curve.gif" /></td>
           <td class="shop">' . $kans . '%</td>
           <td class="shop"><input type="radio" name="car" value="' . $auto['id'] . '" /></td>
         </tr>';
    }
    mysql_free_result($showroom);
    unset($auto);
    unset($kans);
    unset($_POST);
  echo'


       </table><br /><br />
       <img src="index.php?p=captcha" alt="Human check" border="1"><br />
       <b>Typ de code over die hierboven gegeven is:</b><br />
       <input type="text" name="captcha" class="input" /><br />
       <input type="submit" name="submit" value="Steel deze auto!" class="submit" />
     </form>';


  }
  }
echo'
        </div>
        <div id="content_bottom"> </div>';
unset($_SESSION['teBewaren']);
?>