Account Verification (PHP)

[colinhall]

Hi all,

Just run myself into a problem with an account verification for a site I'm building.

The idea is that when a new member signs up, their account has to be verified by an admin before they can log in.

I have the database set up to accommodate this...with a 'verified' column (default value 0)

When the admin verifies them, this changes to 1...this all work fine.

However, I'm stumped on what is probably the easiest part - controlling the login page to redirect them elsewhere if their account is not verified...

I understand it is something along the lines of :

PHP Code:

$verified = "SELECT verified FROM users WHERE username = '".$_POST['uname']."'";
    
  if ($verified == 0){
  die('Your account is not verified');
  }

if ($verified == 1){
die('The account is verified');
} 


(EDIT: I know the 2nd 'if' isn't exactly needed...its just there to show what I'm trying to do!)

I know this could possibly be way off...the main problem of mine is pulling the 0 or 1 value from the database...

Any push in the right direction would be fantastic!

Cheers,

Colin

[calthephenom]

huh, stumped as well
this is a beast script

[FredT]

Not sure what you're looking for... is this it?

PHP Code:

//In the database you need to make sure there are no duplicate usernames if you use this method!
$query = "SELECT verified FROM users WHERE username = '".$_POST['uname']."'";
$execute = mysql_query($query);
$result = mysql_result($execute, 0);
     
if ($result == '0'){ //if result cell is 0
     header("Location: fail.html"); //redirect them to a page
     die();
}

//rest of page continues 


[colinhall]

PHP Code:

$result=mysql_query("select * from users where username='$user' AND password='$pass' AND verified='1'", $db); 

//check that at least one row was returned 

$rowCheck = mysql_num_rows($result); 
if($rowCheck > 0){ 

//register session + redirect to checklogin page 


That's what I came up with, and it works just fine!!

[randyrr]

Hey guys, i'm trying to set up a mysql database where an account status automatically default to inactive or '0'. When a user registers, it sends them an email for them to verify, after verification, the account become active or '1'.

HELP PLEASEEEEEEEEE!!!!!

thanks alot guys!!!

[Redcore]

randyrr, you need to make your own thread rather than hijacking another one.

colinhall - so you got this squared away it looks like? On my authentication system I typically store a session variable that tells my system they're verified and if not, it sends them to the login page. It would be good to make a session token that you store in the database when they login and have each page authenticate that token/user/datetime combo (depending on your performance needs - there are alternative ways). It really depends on how sensitive your data is. I don't have to do this much because I develop for my own intranet system (not much "sensitive data"), so I have everyone authenticate against the Active Directory system and everyone is an employee, so not a lot of mistrust (I still take precautions not to get caught off guard by a disgruntled employee though, hah)

[randyrr]

orr, ohhk...thanks RedCore... :( didn't mean to intrude