session_start();

if(!isset($_SESSION["session_username"])):
header("location:login.php");
else:
?>
<?php

if(isset($_POST["add"])){

$gnumber= htmlspecialchars($_POST['gnumber']);
$telephone=htmlspecialchars($_POST['telephone']);
$author=htmlspecialchars($_POST['author']);
$publicationdate=htmlspecialchars($_POST['publicationdate']);


if(!empty($gnumber) && !empty($telephone) && !empty($author)  && !empty($publicationdate)) {
	$sql="INSERT INTO articles (gnumber, telephone, author, publicationdate) VALUES ('$gnumber','$telephone', '$author', '$publicationdate' )";
$result=mysqli_query($con, $sql);
$editbalance="UPDATE usertbl SET balance=balance-1 WHERE username='".$_SESSION['session_username']."'";
	$minus=mysqli_query($con, $editbalance);
	header("Cache-Control: no-store,no-cache,mustrevalidate");
} else {
$message = "Имя пользователя уже занято!";
}

} else {

$message = "Все поля обязательны для заполнения!";

}


?>


<?php
$balance = mysqli_query ($con, "SELECT * FROM usertbl WHERE username='".$_SESSION['session_username']."'");
while ($myrow = mysqli_fetch_assoc ($balance))
 {echo '<b>Баланс: '. $myrow['balance'].'</b>';}?>