<?php
$success = “”;
$error_message = “”;
$conn = mysqli_connect(“localhost”,”san-shopvfixu”,”San@123shop”,”san-shopvfix”);
if(!empty($_POST[“submit_email”])) {
$_SESSION[’email’]=$_POST[“email”];
$result = mysqli_query($conn,”SELECT * FROM user WHERE email='” . $_POST[“email”] . “‘”);
$count = mysqli_num_rows($result);
if($count>0) {
// generate OTP
$otp = rand(100000,999999);
// Send OTP
require_once(“mail_function.php”);
$mail_status = sendOTP($_POST[“email”],$otp);
$mail_status=1;
if($mail_status == 1) {
$result = mysqli_query($conn,”INSERT INTO otpstore(otp,is_expired,create_at) VALUES (‘” . $otp . “‘, 0, ‘” . date(“Y-m-d H:i:s”). “‘)”);
$current_id = mysqli_insert_id($conn);
if(!empty($current_id)) {
$success=1;
}
}
} else {
$error_message = “Email not exists!”;
}
}
if(!empty($_POST[“submit_otp”])) {
$result = mysqli_query($conn,”SELECT * FROM otpstore WHERE otp='” . $_POST[“otp”] . “‘ AND is_expired!=1 AND NOW() <= DATE_ADD(create_at, INTERVAL 24 HOUR)”);
$count = mysqli_num_rows($result);
if(!empty($count)) {
$result = mysqli_query($conn,”UPDATE otpstore SET is_expired = 1 WHERE otp = ‘” . $_POST[“otp”] . “‘”);
$success = 2;
} else {
$success =1;
$error_message = “Invalid OTP!”;
}
}
?>
<html>
<head>
<title>User Login</title>
<style>
body{
font-family: calibri;
}
.tblLogin {
border: #95bee6 1px solid;
background: #d1e8ff;
border-radius: 4px;
max-width: 300px;
padding:20px 30px 30px;
text-align:center;
}
.tableheader { font-size: 20px; }
.tablerow { padding:20px; }
.error_message {
color: #b12d2d;
background: #ffb5b5;
border: #c76969 1px solid;
}
.message {
width: 100%;
max-width: 300px;
padding: 10px 30px;
border-radius: 4px;
margin-bottom: 5px;
}
.login-input {
border: #CCC 1px solid;
padding: 10px 20px;
border-radius:4px;
}
.btnSubmit {
padding: 10px 20px;
background: #2c7ac5;
border: #d1e8ff 1px solid;
color: #FFF;
border-radius:4px;
}
</style>
</head>
<body>
<?php
if(!empty($error_message)) {
?>
<div class=”message error_message”><?php echo $error_message; ?></div>
<?php
}
?>
<form name=”frmUser” method=”post” action=””>
<div class=”tblLogin”>
<?php
if($success == 1) {
?>
<div class=”tableheader”>Enter OTP</div>
<p style=”color:#31ab00;”>Check your email for the OTP</p>
<div class=”tablerow”>
<input type=”text” name=”otp” placeholder=”One Time Password” class=”login-input” required>
</div>
<div class=”tableheader”><input type=”submit” name=”submit_otp” value=”Submit” class=”btnSubmit”></div>
<?php
} else if ($success == 2) {
$result = mysqli_query($conn,”SELECT * FROM otp_expiry WHERE otp='” . $_POST[“otp”] . “‘”);
$count=mysqli_num_rows($result);
$row=mysqli_fetch_array($result);
if($count > 0){
$_SESSION[‘newid’]=$row[‘newid’];
}
header(“Location: change-password.php”);
?>
<?php
}
else {
?>
<div class=”tableheader”>Enter Your Login Email</div>
<div class=”tablerow”><input type=”text” name=”email” placeholder=”Email” class=”login-input” required></div>
<div class=”tableheader”><input type=”submit” name=”submit_email” value=”Submit” class=”btnSubmit”></div>
<?php
}
?>
</div>
</form>
</body></html>