Forum Moderators: coopster
<?php ###HERE IS WHERE YOU SEE IF THERE IS A CONFIRMATION CODE IN THE URL AND THEN CONFIRM THE ACCOUNT, AND LOG IN THE USER::: but what if confirm code does not match?
if (isset($_GET['confirmation']))
{
$unconfirmed_user = $_GET['username'];
$confirmation_code = $_GET['confirmation'];
$confirm_sql = "SELECT * FROM members WHERE username = '$unconfirmed_user' AND confirmation = '$confirmation_code'";
$sql_confirmed = mysql_query($confirm_sql);
$confirm_count=mysql_num_rows($sql_confirmed);
###IF THE USERNAME AND CONFIRMATION MATCH THEN YOU GET LOGGED INTO THE SESSION:::
if($confirm_count == 1)
{
$update_confirm = "UPDATE members SET confirmed = '1' WHERE username = '$unconfirmed_user' AND confirmation = '$confirmation_code'";
mysql_query($update_confirmed);
mysql_fetch_array($please);
echo $please['confirmation'];
$new_user = mysql_fetch_array($sql_confirmed);
$_SESSION['username'] = $new_user['username'];
$_SESSION['password'] = $new_user['password'];
$_SESSION['user_id'] = $new_user['user_id'];
}
}
<?php ###HERE IS WHERE YOU SEE IF THERE IS A CONFIRMATION CODE IN THE URL AND THEN CONFIRM THE ACCOUNT, AND LOG IN THE USER::: but what if confirm code does not match?
if (isset($_GET['confirmation']) && !empty($_GET['confirmation'])){
//clean and make sql safe
$_GET = array_map('strip_tags', $_GET);
$_GET = array_map('mysql_real_escape_string', $_GET);
//assign
$unconfirmed_user = $_GET['username'];
$confirmation_code = $_GET['confirmation'];
$confirm_sql = "SELECT * FROM `members` WHERE `username` = '".$unconfirmed_user."' AND `confirmation` = '".$confirmation_code."' ";
$sql_confirmed = mysql_query($confirm_sql);
###IF THE USERNAME AND CONFIRMATION MATCH THEN YOU GET LOGGED INTO THE SESSION:::
if(mysql_num_rows($sql_confirmed) > 0){
$update_confirm = "UPDATE `members` SET `confirmed` = 1 WHERE `username` = '".$unconfirmed_user."' AND `confirmation` = '".$confirmation_code."' ";
$please = mysql_query($update_confirmed);//< you forgot to assign the var here!
$result = mysql_fetch_array($please);
print_r($result['confirmation']);
$new_user = mysql_fetch_array($sql_confirmed);
$_SESSION['username'] = $new_user['username'];
$_SESSION['password'] = $new_user['password'];
$_SESSION['user_id'] = $new_user['user_id'];
}
}
else{
echo "No matches found";
exit;
}
