[PHP] ปัญหาซื้อสินค้าเเล้วไม่หัก point ไป ขอความช่วยเหลือหน่อยครับ

<?
if(!$_GET){
$sql_p = "SELECT * FROM `product` ORDER BY id DESC";
$qry_p = mysql_query($sql_p);
while($rst_p = mysql_fetch_array($qry_p)){
echo "<div class='col-md-4 portfolio-item'><img width='250' class='img-responsive' style='margin:10px; #333;' src='".$rst_p["picture"]."'/>&nbsp;&nbsp;&nbsp;<span class='btn btn-primary disabled'><strong>ชื่อ </strong>".$rst_p["name"]."<strong> สถานะ </strong>".$rst_p["rank"]."<strong> ราคา </strong>".$rst_p["price"]."</span>&nbsp;<a href='?id=".$rst_p["code_id"]."'><strong><span class='btn btn-danger'>สั่งซื้อ</strong></a></span></div>";	
}
} else{
	
	if($_GET){
	if(isset($_GET["id"]) && !$_GET["act"] && !$_GET["cmd"]){
		$sql_p = "SELECT * FROM `product` WHERE `code_id` LIKE '".mysql_real_escape_string($_GET["id"])."'";
		$qry_p = mysql_query($sql_p);
		$rst_p = mysql_fetch_array($qry_p);
		
		$sql_status = "SELECT * FROM `code` WHERE `code_id` LIKE '".mysql_real_escape_string($_GET["id"])."' AND `status`='1'";
		$qry_status = mysql_query($sql_status);
		$num_status = mysql_num_rows($qry_status);
		
		if($num_status){
			$status = $num_status;
		} else{
			$status = "<font color='red'>หมด</font>";
		}
		
		if($num_status){
			$buy_btn = "<a href='?id=".mysql_real_escape_string($_GET["id"])."&act=buy'>สั่งซื้อ</a>";
		}
	}
	if($_GET["id"] && $_GET["act"] && $_GET["act"]=="buy" && !$_GET["cmd"]){
		$qry_c = mysql_query("SELECT * FROM `code` WHERE `code_id` LIKE '".mysql_real_escape_string($_GET["id"])."' AND `status`=1");
		$num_c = mysql_num_rows($qry_c);
		
		if($num_c){
			echo "<div align='center' style='border:#33 1px solid;'><img width='250' src='".$rst_p["picture"]."' /><br /><br>ชื่อ : <strong>".$rst_p["name"]."</strong><br />ราคา : <strong>".$rst_p["price"]."</strong> บาท<br />สถานะ : <strong>".$status."</strong><br/></div>".$buy_btn;
			
		echo '<div align="center"><br /><br /><a class="btn btn-success btn-sm" href="?id='.mysql_real_escape_string($_GET["id"]).'&act=buy&cmd=confirm">ยืนยัน</a> | <a class="btn btn-danger btn-sm" href="itemcode.php">ยกเลิก</a></div>';
		} else{
		echo '<div align="center"><br /><br /><h1><font color="#FF0000">สินค้าหมด</font></h1><a class="btn btn-danger btn-sm" href="itemcode.php">กลับ</a></div>';
		}
	} else if($_GET["id"] && $_GET["act"] && $_GET["act"]=="buy" && $_GET["cmd"] && $_GET["cmd"]=="confirm"){
		
		$id_code = mysql_real_escape_string($_GET["id"]);
		
		$qry_a = mysql_query("SELECT * FROM account WHERE username LIKE '".$_SESSION["username"]."'");
		$rst_a = mysql_fetch_array($qry_a);
		
		//Purchase Product
		$sql_p = "SELECT * FROM product WHERE code_id LIKE '".$id_code."'";
		$qry_p = mysql_query($sql_p);
		$rst_p = mysql_fetch_array($qry_p);
		
		if($rst_p["price"]>$rst_a["point"]){
			echo ' <h2><div align="center">ยอดเงินของคุณไม่พอ <br><a class="btn btn-danger btn-sm" href="itemcode.php">ยกเลิก</a></h2>';
			
		} else{
		
		$qry_c = mysql_query("SELECT * FROM `code` WHERE `code_id` LIKE '".$id_code."' AND `status`=1");
		$num_c = mysql_num_rows($qry_c);
		$rst_c = mysql_fetch_array($qry_c);
		
		$sql_buy = "UPDATE `".$config["db"]."`.`account` SET `point` = `point`-'".$rst_p["price"]."' WHERE `account`.`id` =".$_SESSION['id']." LIMIT 1 ;";
		$sql_own = "INSERT INTO `".$config["db"]."`.`owner` (`id` ,`username` ,`price` ,`txid` ,`code_id` ,`situation` ,`code`,`date`)VALUES ";
		$sql_own .= "(NULL,'".$_SESSION["username"]."','".$rst_p["price"]."','".strtoupper(uniqid())."','".$rst_c["code_id"]."','".$rst_c["situation"]."','".$rst_c["code"]."','".date("Y-m-d H:i:s")."');";
		$sql_sta = "UPDATE `".$config["db"]."`.`code` SET `status` =  '0' WHERE  `code`.`id` =".$rst_c["id"]." LIMIT 1 ;";
		
		if($num_c){
		if(mysql_query($sql_buy) && mysql_query($sql_own) && mysql_query($sql_sta)){
			echo '<div align="center"><h1>สั่งซื้อสำเร็จ</h1><a class="btn-xs btn btn-primary" href="history.php">ดูโค้ด</a></div>';
		} else{
			echo '<h1>ไม่สามารถสั่งซื้อได้</h1> (<a href="itemcode.php"><font color="#FF0000">ย้อนกลับ</font></a>)';
		}
		} else{
			echo '<h1>สินค้าหมด</h1> (<a href="itemcode.php"><font color="#FF0000">ย้อนกลับ</font></a>)';
		}
		
		}
		
		//Purchase Product
		
	} else{
		echo '<script>window.location="?id='.mysql_real_escape_string($_GET["id"]).'&act=buy";</script>';
	}
	
	if(!$_GET["id"] && !$_GET["act"]){
		die("404");
	}
	
	} //$_GET
	
}
?>