verify-email.php

<?php
session_start();
require_once 'includes/db_connect.php';
require_once 'includes/auth.php';

$token = $_GET['token'] ?? '';
$message = '';

if ($token) {
    $stmt = $pdo->prepare("SELECT id FROM users WHERE verify_token = ? AND verify_expires > NOW()");
    $stmt->execute([$token]);
    $user = $stmt->fetch();
    
    if ($user) {
        $pdo->prepare("UPDATE users SET is_verified = 1, verify_token = NULL, verify_expires = NULL WHERE id = ?")
           ->execute([$user['id']]);
        $message = 'Your email has been verified! You can now login.';
    } else {
        $message = 'Invalid or expired verification token';
    }
} else {
    $message = 'No verification token provided';
}

$pageTitle = 'Email Verification';
require_once 'includes/header1.php';
?>

<div class="container my-5">
    <div class="row justify-content-center">
        <div class="col-md-6">
            <div class="card shadow">
                <div class="card-body text-center py-5">
                    <h3><?php echo $message; ?></h3>
                    <a href="login.php" class="btn btn-success mt-3">Go to Login</a>
                </div>
            </div>
        </div>
    </div>
</div>

<?php require_once 'includes/footer1.php'; ?>