Email verification script help!
12-27-10, 11:59 PM
Newbie Coder
Join Date: Jul 2010
Posts: 85
Thanks: 10
Thanked 0 Times in 0 Posts
Email verification script help!
ok here are my two scripts for my email verification scripts . it wont change the $isactivated to 1 or anything , wont $_GET the passkey , please look over it and help!
HERE IS WHERE THEY SIGN UP
PHP Code:
<?php // signup.php
include_once 'header.php' ;
'checkemail.js' ;
'checkfname.js' ;
'checkpass.js' ;
'checklname.js' ;
'checkgender.js' ;
<link rel="stylesheet" type="text/css" href="styles.css" />
_END;
isValidEmail ( $Email ){
$pattern = "^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[a-z0-9-]+(\.[a-z0-9-]+)*(\.[a-z]{2,3})$" ;
eregi ( $pattern , $Email )){
true ;
false ;
$error = $Email = $pass = $firstname = $lastname = $sex = $birthdaymonth = $birthdayday = $birthdayyear = "" ;
$_SESSION [ 'email' ])) destroySession ();
$_POST [ 'email' ]))
$Email = sanitizeString ( $_POST [ 'email' ]);
$pass = sanitizeString ( $_POST [ 'pass' ]);
$firstname = sanitizeString ( $_POST [ 'firstname' ]);
$lastname = sanitizeString ( $_POST [ 'lastname' ]);
$pattern = sanitizeString ( $_POST [ 'email' ]);
$sex = $_POST [ 'sex' ];
$confirm_code = md5 ( uniqid ( rand ()));
$birthdaymonth = sanitizeString ( $_POST [ 'birthdaymonth' ]);
$birthdayday = sanitizeString ( $_POST [ 'birthdayday' ]);
$birthdayyear = sanitizeString ( $_POST [ 'birthdayyear' ]);
$isactivated = 0 ;
$Email == "" || $pass == "" || $firstname == "" || $lastname == "" )
$error = "<h3><img src='img/errorfields.png'><br /></h3>" ;
$query = "SELECT * FROM members WHERE email=' $Email '" ;
mysql_num_rows ( queryMysql ( $query )))
$error = "<img src='img/erroremailalreadyexists.png'>" ;
$_POST [ 'firstname' ] || strlen ( $_POST [ 'firstname' ])< 3 || strlen ( $_POST [ 'firstname' ])> 20 )
$error = '<img src="img/errorfirstname.png">' ;
$_POST [ 'lastname' ] || strlen ( $_POST [ 'lastname' ])< 2 || strlen ( $_POST [ 'lastname' ])> 20 )
$error = '<img src="img/errorlastname.png">' ;
$sex == "0" )
$error = "<img src='img/errorgender.png'>" ;
$birthdaymonth == "0" )
$error = "<img src='img/errormonth.png>'" ;
$birthdayday == "0" )
$error = "<img src='img/errorday.png>'" ;
$birthdayyear == "0" )
$error = "<img src='img/erroryear.png>'" ;
isValidEmail ( $_POST [ 'email' ])){
"" ;
'<br><br><br><br><div class="fieldContainer">Invalid Email! Click <a href="http://localhost/PHP%20lesson/signup1test.php">HERE</a> :(</div>' );
$query = "INSERT INTO members VALUES('id',' $firstname ',' $lastname ',' $Email ',' $pass ',' $sex ',' $birthdaymonth ',' $birthdayday ',' $birthdayyear ',' $confirm_code ',' $isactivated ')" ;
queryMysql ( $query );
$result = mysql_query ( $query );
"<h4><br><br><br><h2><div class='fieldContainer'>CONGRATS!</h2><br>Before you can login , check your email for a verification email!</div>" );
$result ){ // ---------------- SEND MAIL FORM ----------------
$to = $Email ;
// Your subject
$subject = "Your confirmation link here" ;
// From
$header = "from:Social network Team" ;
// Your message
$message = "Your Comfirmation link \r\n" ;
$message .= "Click on this link to activate your account \r\n" ;
$message .= "http://localhost/PHP%20lesson/confirm.php?passkey= $confirm_code " ;
// send email
$sentmail = mail ( $to , $subject , $message , $header );
// if not found
else {
"We couldnt find you email!" ;
// if your email succesfully sent
if( $sentmail ){
"Your Confirmation link Has Been Sent To Your Email Address." ;
"Cannot send Confirmation link to your e-mail address Please try again!" ;
<head>
$error
$firstname " onBlur='checkfirstname(this)'/><span id='info1'></span>
$lastname " onBlur='checklast(this)' /><span id='info3'></span>
$Email " onBlur='checkEmail(this)'/><span id='info'></span>
$pass " onBlur='checkpass(this)' /><span id='info2'></span>
$sex " onBlur='checksex(this)' /><span id='infosex'></span>
$birthdaymonth " />
$birthdayday " />
$birthdayyear " />
_END;
?>
AND HERE IS WHERE THEY CONFIRM THE EMAIL AND IT SHOULD INSTERT THE STUFF INTO THE DATA BASE
thanks
Last edited by phphelpme; 12-28-10 at 12:01 AM .
12-28-10, 04:30 PM
Community Leader
Join Date: Sep 2005
Location: Spain
Posts: 8,075
Thanks: 11
Thanked 88 Times in 83 Posts
First off, escape your input!!! If I wrote:
I could easily activate my account without even checking the email.
PHP: mysql_real_escape_string - Manual
Read this, please!
Furthermore, you should use an UPDATE query to activate the user, using a WHERE clause.
On a last note, include() should be used to include server side (PHP) scripts, and not JavaScript. It works, but it's bad design.
01-01-11, 06:46 PM
Wannabe Coder
Join Date: Oct 2010
Posts: 150
Thanks: 6
Thanked 20 Times in 20 Posts
Quote:
Originally Posted by
Nico
On a last note, include() should be used to include server side (PHP) scripts, and not JavaScript. It works, but it's bad design.
How come its a bad design? Just curious.
01-02-11, 04:07 PM
Community Leader
Join Date: Sep 2005
Location: Spain
Posts: 8,075
Thanks: 11
Thanked 88 Times in 83 Posts
In a good design, the layout is separated from the actual code. As in a template.
See
Smarty ,
MVC , etc...
Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
Thread Tools
Display Modes
Linear Mode
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
Linear Mode
