Viewing file:  users_verify.php (4.9 KB) -rw-r--r--
Select action/file-type:
 (+) |  (+) |  (+) | Code (+) | Session (+) |  (+) | SDB (+) |  (+) |  (+) |  (+) |  (+) |  (+) |
<?php
include('admin/conn.php');
session_start();
if (isset($_SESSION['success_message'])) {
echo '<div style="color: green;">' . $_SESSION['success_message'] . '</div>';
unset($_SESSION['success_message']);
}
?>
<?php
$settings = mysqli_query($con,"SELECT * FROM settings");
$setting = mysqli_fetch_array($settings);
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="keywords" content="کلمات کلیدی سایت">
<meta name="description" content="#">
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
<title><?php echo $setting['site_name']; ?></title>
<link rel="icon" href="assets/img/favicon.png">
<link
href="https://fonts.googleapis.com/css2?family=Barlow:ital,wght@0,400;0,500;0,600;0,700;0,900;1,500;1,700&display=swap"
rel="stylesheet">
<link rel="stylesheet" href="assets/css/bootstrap.min.css">
<link rel="stylesheet" href="assets/css/cube-portfolio.min.css">
<link rel="stylesheet" href="assets/css/owl.carousel.min.css">
<link rel="stylesheet" href="assets/css/slicknav.min.css">
<link rel="stylesheet" href="assets/css/maginific-popup.min.css">
<link rel="stylesheet" href="assets/css/animate.min.css">
<link rel="stylesheet" href="assets/css/nice-select.css">
<link rel="stylesheet" href="assets/css/datepicker.css">
<link rel="stylesheet" href="assets/css/fontawesome.min.css">
<link rel="stylesheet" href="assets/css/icofont.css">
<link rel="stylesheet" href="assets/css/default.css">
<link rel="stylesheet" href="assets/css/style.css">
<link rel="stylesheet" href="assets/css/responsive.css">
</head>
<body>
<section class="register-area">
<div class="container">
<div class="row">
<div class="col-lg-6 offset-lg-3 col-md-8 offset-md-2 col-12 wow fadeInUp" data-wow-delay="0.3s">
<div class="account-box">
<div class="account-box-head">
<h2>Verify Your Email here</h2>
<p>Kateb Curative Hospital</p>
</div>
<div class="account-form">
<?php if (isset($error_message)) { ?>
<div style="color: red;"><?php echo $error_message; ?></div>
<?php } ?>
<form method="post">
<div class="row">
<div class="col-12">
<div class="form-group">
<label>Verification Code</label>
<input type="text" name="code" placeholder="" required="required">
</div>
</div>
<div class="col-12">
<div class="form-group">
<div class="account-button">
<button type="submit" class="theme-btn" style="background-color: #a9c438;" name="verify" value="Verify">Verify</button>
</div>
</div>
</div>
<div class="col-12">
<div class="login-bottom-content bottom-content">
</div>
</div>
</div>
</form>
</div>
</div>
</div>
</div>
</div>
</section>
<script data-cfasync="false" src="../cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js"></script><script src="assets/js/jquery-3.6.0.min.js"></script>
<script src="assets/js/jquery-3.6.0.min.js"></script>
<script src="assets/js/bootstrap.bundle.min.js"></script>
<script src="assets/js/bootstrap-datepicker.js"></script>
<script src="assets/js/modernizer.min.js"></script>
<script src="assets/js/magnific-popup.min.js"></script>
<script src="assets/js/waypoints.min.js"></script>
<script src="assets/js/jquery.counterup.min.js"></script>
<script src="assets/js/owl.carousel.min.js"></script>
<script src="assets/js/cube-portfolio.min.js"></script>
<script src="assets/js/nice-select.min.js"></script>
<script src="assets/js/wow.min.js"></script>
<script src="assets/js/jquery.slicknav.min.js"></script>
<script src="assets/js/steller.min.js"></script>
<script src="assets/js/easing.min.js"></script>
<script src="assets/js/jquery.scrollUp.min.js"></script>
<script src="assets/js/main.js"></script>
</body>
</html>
<?php
if (isset($_POST['verify'])) {
include('conn.php');
$email = $_GET['email'];
// You should use prepared statements to avoid SQL injection
$stmt = $con->prepare("SELECT * FROM users WHERE email = ?");
$stmt->bind_param("s", $email);
$stmt->execute();
$result = $stmt->get_result();
if ($result && $result->num_rows > 0) {
$check_row = $result->fetch_assoc();
$code = $_POST['code'];
$verify_code = $check_row['verification_code'];
if ($code == $verify_code) {
echo "Verification successful!";
// Set the user's verification status to true in the database
$update_stmt = $con->prepare("UPDATE users SET verified = 1 WHERE email = ?");
$update_stmt->bind_param("s", $email);
$update_stmt->execute();
// Clear the output buffer and redirect
ob_end_clean(); // Clear the output buffer
echo '<script>window.location.href = "index.php";</script>';
exit(); // Make sure to exit after the header
} else {
echo "Invalid verification code.";
}
} else {
echo "User not found.";
}
$stmt->close();
$con->close();
}
ob_end_flush();
?>
|