User rutschen im anderen Account

<?php
// ######################################################################### 
// LOGIN TICKETS
// ######################################################################### 


function GenerateTicket(){ 


    $data = "ST-"; 


    for ($i=1; $i<=6; $i++){ 
        $data = $data . rand(0,9); 
    } 


    $data = $data . "-"; 


    for ($i=1; $i<=20; $i++){ 
        $data = $data . rand(0,9); 
    } 


    $data = $data . "-hero-fire-de"; 
    $data = $data . rand(0,5); 


    return $data; 
} 


// ######################################################################### 


if(session_is_registered('username')){ 


    $rawname =   FilterText($_SESSION['username']); 
    $rawpass = FilterText($_SESSION['password']); 


    $usersql = mysql_query("SELECT * FROM users WHERE username = '".$rawname."' AND password = '".$rawpass."' LIMIT 1"); 
    $myrow = mysql_fetch_assoc($usersql); 


    $userinfo = mysql_query("SELECT * FROM user_stats WHERE id = '".$myrow['id']."'"); 
    $userinfo = mysql_fetch_assoc($userinfo); 


    $password_correct = mysql_num_rows($usersql); 


    $my_id = $myrow['id']; 
    $user_rank = $myrow['rank']; 


    $ban = mysql_query("SELECT * FROM bans WHERE value = '".$myrow['username']."' AND bantype = 'user' or value = '".$remote_ip."' AND bantype = 'ip' LIMIT 1"); 
    $bancheck = mysql_num_rows($ban); 


    if($myrow['ip_reg'] == "0"){ 
        mysql_query("UPDATE users SET ip_reg = '".$remote_ip."' WHERE id = '".$myrow['id']."'"); 


    }elseif($password_correct !== 1){ 


    session_destroy(); 
    header("location: ".$path."/account/logout"); 
    exit; 


    }elseif($bancheck > 0){ 


    $bandata = mysql_fetch_assoc .Filtertext($ban); 


    $timestamp = time(); 
    if($bandata['expire'] > $timestamp){ 
    $login_error = "Du bist gebannt! Der Grund f?r deinen Bann lautet "".$bandata['reason']."" und dauert bis ".date('d.m.Y - H:i:s', $bandata['expire'])."";            
    include('logout.php'); 
    session_destroy(); exit; 


    } else{  
        mysql_query("DELETE FROM bans WHERE value = '".$name."' AND bantype = 'user' or value = '".$remote_ip."' AND bantype = 'ip' LIMIT 1"); }   
    } 


    $logged_in = true; 
    $name = HoloText($myrow['username']); 
        $rank = HoloText($myrow['rank']); 


    } else { 


    $user_rank = 0; 
    $name = "Gast"; 
    $my_id = "Gast-id"; 
    $myticket = "ST-No-Name-tebbo-fire"; 
    $logged_in = false; 


} 
?>