activate.php

<?php

# activate.php.
# Created on May 1, 2019.
# Created by Elias Gutierrez.


require('includes/config.inc.php');

$page_title = 'Activate Your Account';

include('includes/account_header.html');

if (isset($_GET['x'], $_GET['y']) && filter_var($_GET['x'], FILTER_VALIDATE_EMAIL) && (strlen($_GET['y']) == 32)) {

    require(MYSQL);
    $q = "UPDATE users SET verify_code=NULL WHERE (email='" . mysqli_real_escape_string($dbc, $_GET['x']) . "' AND verify_code='" . mysqli_real_escape_string($dbc, $_GET['y']) . "') LIMIT 1";
    $r = mysqli_query($dbc, $q) or trigger_error("Query: $q\n<br>MySQL Error: " . mysqli_error($dbc));

    if (mysqli_affected_rows($dbc) == 1) {
        echo "<h3>Your account is now active! You may log in.</h3>";
    } else {
        echo '<p class="error">Sorry, but your account could not be activated. Please re-check the link given to you in your email address, or contact the system administrator.</p>';
    }

    mysqli_close($dbc);

} else {

    $url = BASE_URL . 'index.php';

    ob_end_clean();

    header("Location: $url");

    exit();

}

include('includes/account_footer.html');
?>