[RESOLVED] bug in my money sending system

[jasondavis]

	
//check if sender account has enough money to send
$totalmoney = mymoney($_SESSION['auto_id']);

if ($totalmoney < $amount){
	$msg = "Error: Sorry you do not have enough money to send $ $amount";
	$_SESSION['sess_msg'] = $msg;
	header("location: $SITE_PATH?p=account.money&r=$receiver");
	exit;
}

This checks that the user sending fake money to another user on my site has enough money in there account, the problem that users found is if they send a -negative amount it puts that amount into there own account. so if I have 1,000$ and I try to send -70,000$ it makes my account have 71000$ any help would be greatly appreciated

[NogDog]

Do the same sort of validation to verify that the amount is not less than 0, perhaps as an elseif clause following the if clause in your example code.

[jasondavis]

thanks actually from my other topic, now that it only allows numeric values it gives and error now when it sees the - so it works now, thanks =)