Promote User and Notify Them

<?php
include("config.php");
if($logged[username] && $logged[userlevel] == 6) {
switch($_GET['promote']) {
 
default:
echo "<form action='?promote=user' method='post'>
Username: <input type='text' name='user'>
Level: <select name='level'>
<option value='0'>Banned</option>
<option value='1'>Unvalidated user</option>
<option value='2'>Validated User</option>
<option value='4'>Moderator</option>
<option value='6'>Administrator</option>
</select>
<input type='submit' value='Submit'></form>";
break;
 
case 'user':
$admin = $_POST['user'];
$level = $_POST['level'];
 
$update = mysql_query("UPDATE `members` SET `userlevel` = '$level' WHERE `username` = '$admin'");
if ($_POST['level'] == 6)
{
//start private message
$to = $admin; //get who it is to
$from = 'Bot'; //who its from
$subject = "Promotion!"; //new subject
$msg = "Hello, $admin! $logged[username] promoted you to an Administrator!"; //the content
$date = date("F j, Y, g:i a"); //the date sent
$do = mysql_query("INSERT INTO `privates` (`to`,`from`,`date`,`subject`,`content`) VALUES ('" . $to . "','" . $from . "','" . $date . "','" . $subject . "','" . $msg . "')") or die(mysql_error()); //insert into the table!
//end private message
}
if ($_POST['level'] == 4)
{
//start private message
$to = $admin; //get who it is to
$from = 'Bot'; //who its from
$subject = "Promotion!"; //new subject
$msg = "Hello, $admin! $logged[username] promoted you to a Moderator!"; //the content
$date = date("F j, Y, g:i a"); //the date sent
$do = mysql_query("INSERT INTO `privates` (`to`,`from`,`date`,`subject`,`content`) VALUES ('" . $to . "','" . $from . "','" . $date . "','" . $subject . "','" . $msg . "')") or die(mysql_error()); //insert into the table!
//end private message
}
echo "$admin is now a $level.";
break;
}
}
?>