invisio v2.0

<?php
    session_start();
    include('../../../config/main_function.php');
    $secure = "cAh3DrJACzw4RbU";
    $connection = connectDB($secure);

$member_id =  mysqli_real_escape_string($connection, $_POST['member_id']);
    $change_level =  mysqli_real_escape_string($connection, $_POST['change_level']);

if ($connection) {

$sql_update = "UPDATE tbl_member SET  
        register_level = '$change_level' 
        WHERE member_id = '$member_id'";

$res_update = mysqli_query($connection, $sql_update)  or die($connection->error);

if ($res_update) {

$sql = "SELECT * FROM tbl_package_price WHERE member_type = '$change_level'";
            $res = mysqli_query($connection, $sql);
            $row = mysqli_fetch_assoc($res);

$sql_update_pay = "UPDATE tbl_member_payment SET  
            member_level = '$change_level' 
            ,payment_amount = '{$row['unit_price']}' 
            WHERE member_id = '$member_id'";
    
            $res_update_pay = mysqli_query($connection, $sql_update_pay)  or die($connection->error);
            if ($res_update_pay) {
                $arr['result'] = 1;
            }else{
                $arr['result'] = 0;

}
        } else {
            $arr['result'] = 0;
        }
    } else {
        $arr['result'] = 9;
    }

mysqli_close($connection);
    echo json_encode($arr);
    ?>