consortium/verify.php at master · JituR101/consortium · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
<?php
@session_start();
// error_reporting(E_ALL);
// ini_set('display_errors', '1');
require_once('includes/mailing.php');
$pagetitle = 'Verify | Consortium';
$verify = $_SESSION['verify'];

require_once('includes/dbconnect.php');

$email = $con->real_escape_string($_GET['email']);

if(isset($_SESSION['email'])){
    header('location:dashboard.php');
}

else if(isset($_POST['conso_id_sub'])) {

  $otpver = $con->real_escape_string($_POST['conso_id']);

  if($email == ""){
    header('location:regnew.php');
  }
  if($otpver == ""){
    $msg = "That's not your ConsoID. Please check again.";
  }
  else{
    $query = "SELECT * from registrations where Email='$email'";
    $result = mysqli_query($con,$query);
    $num = mysqli_num_rows($result);

    if($num >0){
      $data = mysqli_fetch_array($result);
      if($data['otp'] == $otpver){
        $q = "UPDATE registrations SET otp='Confirmed' WHERE Email = '$email'";
        if(mysqli_query($con,$q)){
          $_SESSION['login_error'] = "Your email has been verified! You can Login now";
        }else{
          $_SESSION['login_error'] = "Error description: " . mysqli_error($con);
        }
        // $_SESSION['login_error'] = "Your email has been verified! You can Login now";
        header('location:login.php');
      }else{
        $msg = "Your ConsoID is incorrect. Please try again.";
      }
    }else{
      echo("Error description: " . mysqli_error($con));
    }
  }
}

elseif(isset($_POST['resend'])) {

  $otp = '1234567890';
  $otp = str_shuffle($otp);

  $conso_id = substr($name, 0, 3);
  $conso_id .= substr($otp, 0, 4);


  $query = "SELECT * FROM registrations WHERE Email='$email'";
  $result = mysqli_query($con,$query);
  $num = mysqli_num_rows($result);
  if($num != 0){
    $conso_id = "";
    $pass = str_shuffle($otp);
    $conso_id = substr($name, 0, 3);
    $conso_id .= substr($pass, 0, 4);
  }

  $q = "UPDATE registrations SET otp='$conso_id' WHERE Email = '$email'";

  if(mysqli_query($con,$q)){

    $msg = "Your ConsoID has been sent to your registered email id. Please enter your ConsoID below to confirm your email address.";
    $s = "Verify your Email | E-Cell VNIT Nagpur";
    $_SESSION['verify'] = "Your ConsoID has been sent to your registered email id. Please enter your ConsoID below to confirm your email address.";
    htmlMail($email,$s,$name,$conso_id, 'conso_id');
    header('location:verify.php?email='.$email.'');
  }
  else{
    $msg = "Something Went Wrong";
  }


}
?>

<!DOCTYPE html>
<html>
  <?php include('includes/head.php'); ?>
  <body class="back">
    <?php include('includes/header.php'); ?>
    <div id="register" style="min-height: 90vh; display: flex; align-items: center;">
        <div class="g-container--sm g-padding-y-80--xs g-padding-y-125--sm">
            <div class="g-text-center--xs g-margin-b-60--xs">
                <!-- <p class="text-uppercase g-font-size-14--xs g-font-weight--700 g-color--white-opacity g-letter-spacing--2 g-margin-b-25--xs">Sign Up</p> -->
                <h2 class="g-font-size-32--xs g-font-size-36--md g-color--white">Kindly Verify Your Email ID</h2>
                <p class="text-uppercase g-font-size-14--xs g-font-weight--700 g-color--red g-letter-spacing--2 g-margin-b-25--xs"><?php echo $verify; ?></p>
                <p class="text-uppercase g-font-size-14--xs g-font-weight--700 g-color--red g-letter-spacing--2 g-margin-b-25--xs"><?php echo $msg; ?></p>
                <p class="text-uppercase g-font-size-14--xs g-font-weight--700 g-color--red g-letter-spacing--2 g-margin-b-25--xs" id="message"></p>
            </div>
            <div class="g-text-center--xs">
              <form class="center-block g-width-500--sm g-width-550--md" method="post" action="verify.php?email=<?php echo $email ?>">
                  <div class='permanent'>
                    <div class='g-margin-b-30--xs'>
                      <input type='password' class='form-control s-form-v3__input' placeholder='* Your ConsoID' name='conso_id' style='text-transform: none' id='otp'>
                    </div>
                  </div>

                  <div class='g-text-center--xs'>
                    <button type='submit' name='conso_id_sub' class='text-uppercase s-btn s-btn--md s-btn--white-brd g-radius--50 g-padding-x-70--xs g-margin-b-20--xs'>Submit</button>
                  </div>
              </form>

              <form class='center-block g-width-500--sm g-width-550--md' method='post' action='verify.php?email=<?php echo $email ?>'>
                <button type='submit' name='resend' class='text-uppercase s-btn g-radius--50 g-padding-x-20--xs g-margin-b-20--xs'>Resend ConsoID</button>
              </form>
            </div>

        </div>
    </div>
    <?php include("includes/footer_landing.php");?>
    <?php include("includes/script.php");?>
  </body>
</html>