ikan Uploader :
Directory : /home/ni05r7l36tus/www/poojajewellersbbsr.com/
Upload File : |
| Current File : //home/ni05r7l36tus/www/poojajewellersbbsr.com/verifyOTP_forgot_password.php |
<?php
session_start();
ini_set('display_errors', 1);
error_reporting(E_ALL);
include 'connection/config.php'; // assumes $pdo is created here
$stmt = $pdo->prepare("SELECT * FROM store_locations");
$stmt->execute();
$store_locations = $stmt->fetch(PDO::FETCH_ASSOC);
if (!isset($_POST['verifyOTP'])) {
header('Location: forgot_password.php');
exit;
}
$email = trim($_POST['email'] ?? '');
$otp = trim($_POST['otp'] ?? '');
if ($email === '' || $otp === '') {
echo "<script src='https://cdn.jsdelivr.net/npm/sweetalert2@11'></script><script>
Swal.fire({ icon: 'info', title: 'Missing Data', text: 'Please provide both email and OTP.' });
</script>";
exit;
}
try {
$stmt = $pdo->prepare("SELECT customer_id, verification_token, token_expires FROM customers WHERE email = ? LIMIT 1");
$stmt->execute([$email]);
$row = $stmt->fetch(PDO::FETCH_ASSOC);
if (!$row) {
echo "<script src='https://cdn.jsdelivr.net/npm/sweetalert2@11'></script><script>
Swal.fire({ icon: 'warning', title: 'Email Not Found', text: 'No account found for this email.' });
</script>";
exit;
}
// Normalize OTP values (CHAR type in DB may have trailing spaces)
$stored_otp = trim((string)($row['verification_token'] ?? ''));
$input_otp = trim((string)$otp);
$expiryTimestamp = $row['token_expires'] ? strtotime($row['token_expires']) : 0;
$now = time();
if ($stored_otp === '') {
echo "<script src='https://cdn.jsdelivr.net/npm/sweetalert2@11'></script><script>
Swal.fire({ icon: 'error', title: 'No OTP Found', text: 'No OTP is set for this account. Please request a new OTP.' });
</script>";
exit;
}
if ($stored_otp === $input_otp) {
if ($expiryTimestamp && $expiryTimestamp > $now) {
// OTP is valid - allow password reset
$_SESSION['reset_customer_id'] = $row['customer_id'];
// Clear the OTP in DB
$pdo->prepare("UPDATE customers SET verification_token = NULL, token_expires = NULL WHERE customer_id = ?")
->execute([$row['customer_id']]);
header("Location: passwordupdate.php?success=OTP verified, please reset your password");
exit;
} else {
// OTP expired
echo "<script src='https://cdn.jsdelivr.net/npm/sweetalert2@11'></script><script>
Swal.fire({ icon: 'warning', title: 'OTP Expired', text: 'Your OTP has expired. Please request a new one.' });
</script>";
exit;
}
} else {
// OTP mismatch
echo "<script src='https://cdn.jsdelivr.net/npm/sweetalert2@11'></script><script>
Swal.fire({ icon: 'error', title: 'Invalid OTP', text: 'The OTP you entered is incorrect. Please try again.' });
</script>";
exit;
}
} catch (Exception $e) {
$msg = htmlspecialchars($e->getMessage());
echo "<script src='https://cdn.jsdelivr.net/npm/sweetalert2@11'></script><script>
Swal.fire({ icon: 'error', title: 'Server Error', text: 'An error occurred: {$msg}' });
</script>";
exit;
}
........