PHP Signup with OTP Email Verification System - OTP Verify (Part 4)

byKamran Mubarik - 2



OTP Verify Process:

After creating a signup function to sending OTP in email using phpMailer and SMTP.
Now we need a function to verify OTP and activate the account according to the OTP, also I will add time-specific validation to verify OTP in that time duration.

HTML  Code:

Create a new file "email_verify.php"  and paste the below code in it and save it.

<!DOCTYPE html>
<html lang="en">

 	<head>
 		<!-- Meta Tags -->
		<meta charset="UTF-8">
		<meta name="author" content="Kamran Mubarik">
		<meta name="viewport" content="width=device-width, initial-scale=1.0">
		<!-- Site Title -->
 		<title>PHP Signup with OTP Email Verification System</title>
 		<!-- External Style Sheet -->
		<link rel="stylesheet" type="text/css" href="css/style.css" />

 	</head>
<body>
	<div class="wrapper">
		<div class="otp">
			<h2>OTP Verify</h2>
			<hr>		
			<form action="" method="POST">
				<div class="form-group">
					<label>OTP</label>
					<input type="text" name="otp" placeholder="Enter OTP to verify email" autocomplete="off">
				</div>
				<div class="form-group">
					<label></label>
					<input type="submit" name="verify" value="Verify">
				</div>
			</form>
		</div>
	</div>
	<!-- End of Login Wrapper -->
</body>

<script type="text/javascript" src="js/jquery.min.3-4-1.js"></script>

</html>

PHP  Code to Verify Code in Specific Time:

  • Include config.php file for database connection.
  • add default timezone PHP function
  • watch the video if you do not understand the code
<?php 
include "config.php";

date_default_timezone_set("Asia/Karachi");

if (isset($_POST['verify'])) {
	
	if (isset($_GET['code'])) {
		
		$activation_code = $_GET['code'];
		$otp = $_POST['otp'];

		$sqlSelect = "SELECT * FROM user WHERE activation_code = '".$activation_code."'";
		$resultSelect = mysqli_query($conn, $sqlSelect);
		if (mysqli_num_rows($resultSelect) > 0) {
			
			$rowSelect = mysqli_fetch_assoc($resultSelect);

			$rowOtp = $rowSelect['otp'];
			$rowSignupTime = $rowSelect['signup_time'];

			$signupTime = date('d-m-Y h:i:s', strtotime($rowSignupTime));
			$signupTime = date_create($signupTime);
			date_modify($signupTime, "+1 minutes");
			$timeUp = date_format($signupTime, 'd-m-Y h:i:s');

			if ($rowOtp !== $otp) {
				echo "<script>alert('Please provide correct OTP..!')</script>";
			}
			else{
				if (date('d-m-Y h:i:s') >= $timeUp) {
					
					echo "<script>alert('Your time is up..try it again..!')</script>";
					header("Refresh:1; url=index.php");
				}
				else{
					$sqlUpdate = "UPDATE user SET otp = '', status = 'active' WHERE otp = '".$otp."' AND activation_code = '".$activation_code."'";
					$resultUpdate = mysqli_query($conn, $sqlUpdate);
					
					if ($resultUpdate) {
						
						echo "<script>alert('Your account successfully activated')</script>";
						header("Refresh:1; url=index.php");
					}
					else{
						echo "<script>alert('Opss..Your account not activated')</script>";
					}
				}
			}

		}
		else{
			header("Location: index.php");
		}
	}
}

 ?>
Tags:

2 Comments

Post a Comment

Post a Comment

Previous Post Next Post