need to work on buy.php, index.php