The code you provided would produce this:
mysql_query(mysql_query("UPDATE members SET money='$money2' AND hp='$newhp' WHERE username='$username'");
) or die(mysql_error());
Try this:
$sql = "UPDATE members SET money='$money2' AND hp='$newhp' WHERE username='$username'";
mysql_query($sql) or die(mysql_error());