Post in url - area shape (Opgelost)

<input name="train" type="image" value="1" onclick="document.getElementById('sel').value = 'true'" src="images/flags/newyork.gif" /> <font color="#FFFFFF"><?=$city_1;?><br />

<input name="train" type="image" value="1" onclick="document.getElementById('sel').value = 'true'" src="images/flags/newyork.gif" /> <font color="#FFFFFF"><?=$city_1;?><br />

<area shape="poly" alt="" coords="174,60,212,91,184,116,159,87" href="index.php?a=general/airfield&x=1" alt="Sun" id="fancy2" title="<?=$city_1;?> - <table width=200px><tr><td><img src='images/icons/money.gif'> <?=$airfield_18;?>: €3500</td></tr><tr><td><img src='images/icons/status_online.gif'> <?=$airfield_19;?>: <?echo$amsterdam;?></td></tr></table>">

<area shape="poly" alt="" coords="174,60,212,91,184,116,159,87" href="index.php?a=general/airfield&x=1" alt="Sun" id="fancy2" title="<?=$city_1;?> - <table width=200px><tr><td><img src='images/icons/money.gif'> <?=$airfield_18;?>: €3500</td></tr><tr><td><img src='images/icons/status_online.gif'> <?=$airfield_19;?>: <?echo$amsterdam;?></td></tr></table>">

<?
$train = $_POST['train'];
$dituur = date(H);
$extrauur = $dituur+1;
if($extrauur > 24){$extrauur = "00";}
$uur = $extrauur;
if($train > 0){
if($data->contant >= 1500){
$error = niks;
$select = mysql_query("SELECT * FROM `station` WHERE `stad`='$train'");
$select2 = mysql_fetch_object($select);
mysql_query("UPDATE `users` SET `aankomst`='$uur',`vliegen`='0000-00-00 00:00:00',`contant`=`contant`-'3500',`aankomststad`='$train' WHERE `id`='$data->id'");
mysql_query("UPDATE `users` SET `stationkaarten`=`stationkaarten`+'1',`bank`=`bank`+'1500' WHERE `login`='$select2->eigenaar'");
$_SESSION['mission'] = "$missions_15";
}
else{$error = 1;}
}
if($_GET['f'] == cancel){
$error = annuleren;
mysql_query("UPDATE `users` SET `aankomst`='25' WHERE `id`='$data->id'");
?>

<?
$train = $_POST['train'];
$dituur = date(H);
$extrauur = $dituur+1;
if($extrauur > 24){$extrauur = "00";}
$uur = $extrauur;
if($train > 0){
if($data->contant >= 1500){
$error = niks;
$select = mysql_query("SELECT * FROM `station` WHERE `stad`='$train'");
$select2 = mysql_fetch_object($select);
mysql_query("UPDATE `users` SET `aankomst`='$uur',`vliegen`='0000-00-00 00:00:00',`contant`=`contant`-'3500',`aankomststad`='$train' WHERE `id`='$data->id'");
mysql_query("UPDATE `users` SET `stationkaarten`=`stationkaarten`+'1',`bank`=`bank`+'1500' WHERE `login`='$select2->eigenaar'");
$_SESSION['mission'] = "$missions_15";
}
else{$error = 1;}
}
if($_GET['f'] == cancel){
$error = annuleren;
mysql_query("UPDATE `users` SET `aankomst`='25' WHERE `id`='$data->id'");
?>