diff --git a/activate.php b/activate.php index d2048e0..4c916e7 100644 --- a/activate.php +++ b/activate.php @@ -7,13 +7,14 @@ No code delivered. nothing to do here.'); } -$userid = $_GET['userid']; +$userid = $_GET['userid']; //storing the userid & code provided in variables $code = $_GET['code']; @@ -26,24 +27,24 @@ if($user === null || $user['activationcode'] === null) { die(''); } - + //check if the 24h window is still open for this code if($user['activationcode_time'] === null || strtotime($user['activationcode_time']) < (time()-24*3600) ) { die(''); } - +//check if the codes match if(sha1($code) != $user['activationcode']) { die(''); } - + //activate user: if(isset($_GET['send'])) { $statement = $pdo->prepare("UPDATE users SET activated = 1, activationcode = NULL, activationcode_time = NULL WHERE id = :userid"); $result = $statement->execute(array('userid'=> $userid )); - if($result) { + if($result) { //if successfull: die & go to start.php via update.php die('Activated. Going to start now.'); } }