email activation by admin

[sirTemplar]

hi again. i have a script that sends an email to the admin about a new registration from a form. this registration gets 0 in the field in the database called confirm.

what i want to do is this. that on the email the admin receives, there should be a link to activate the new user i.e. updates the database table putting 1 on the confirm field. what i have now is this.

on the email that the admin receives.

//Send email to admin

$headers = "Content-Type: text/html";

mail ("[e-mail]", "Account activation", "<b>New Registration:</b>
<br><p> 
<b>$name $surname</b> requested registration.<br><p>

<p>To activate this account click
<a href=http://www.mysite.com/activate.php?username=$user>here</a></p>",$headers);

then the activate.php is:

$db_host  = 'xxx'; 
$db_user  = 'xxx'; 
$db_pass  = 'xxx'; 
$db_name  = 'xxx'; 
$db_table = 'xxxxx'; 
$conn = mysql_connect($db_host,$db_user,$db_pass); 
mysql_select_db($db_name,$conn); 

$result = mysql_query ("UPDATE table SET confirm = '1'  

                         WHERE username='$user' 
                        ",$conn);  

what happens now admin gets the email but when he tries to click the link, he gets a blank page and the database is not updated! any help? thanks

[sidney]

are you extracting $user from $_GET['username']

[tekky]

$result = mysql_query ("UPDATE table SET confirm = '1'

WHERE username='$user'
",$conn);

shouldnt that read more like....

$result = mysql_query ("UPDATE $db_table SET confirm = '1'

WHERE username='$user'
",$conn);

[sirTemplar]

i tried

$db_host  = 'xxx';  

$db_user  = 'xxx';  

$db_pass  = 'xxx';  

$db_name  = 'xxx';  

$db_table = 'xxxxx';  

$conn = mysql_connect($db_host,$db_user,$db_pass);  

mysql_select_db($db_name,$conn);  

$user = $_GET['user']

$result = mysql_query ("UPDATE table SET confirm = '1'   

                         WHERE username='$user' 
                        ",$conn);

gave me a parse errror on line 15!

[sidney]

$user = $_GET['user']

you forgot semi colon

$user = $_GET['user'];

and the get var in your form is username not user

$user = $_GET['username'];

[sirTemplar]

thanks very much sid, that worked! i have to get some new lenses!

[sirTemplar]

just a follow up. what do i have to add to the script if i want that when the admin activates the account via the email link, the user also gets an automatic email telling him that hi account was activated? thanks again.

[sidney]

if(mysql_query ("UPDATE table SET confirm = '1'

WHERE username='$user'
",$conn))
{
//mail function here grab email from database using username
}

[sirTemplar]

this is what i did on activate.php

$user = $_GET['username'];

$result = mysql_query ("UPDATE table SET confirm = '1' WHERE username='$user'",$conn);  

{ 
//mail function here grab email from database using username 
//Send email to user

$headers = "Content-Type: text/html";
$headers = "From: OFMConv. Website <[e-mail]>";

$email = mysql_query ("SELECT email from table WHERE username='$user'",$conn); 

mail ("$email", "Account activated: My Site", "Your Registration info: 

Your accout has been activated",$headers); 
}

echo "<font face=Verdana size=4 color=#FF0000>Account Activated!"; 
?>

activates account but no email sent!

[sidney]

  

$user = $_GET['username']; 

if(mysql_query ("UPDATE table SET confirm = '1' WHERE username='$user'",$conn))   

{  

//mail function here grab email from database using username 
//Send email to user 

$headers = "Content-Type: text/html"; 
$headers = "From: OFMConv. Website <[e-mail]>"; 

$query = mysql_query ("SELECT email from table WHERE username='$user'",$conn);
$email=mysql_fetch_assoc($query,$conn);  

mail ($email['email'], "Account activated: My Site", "Your Registration info: 

Your accout has been activated",$headers);  
} 

echo "<font face=Verdana size=4 color=#FF0000>Account Activated!";  

?> 

[sirTemplar]

its working now!

i put & email=$email

<p>To activate this account click
<a href=http://www.mysite.com/activate.php?username=$user&email=$email>here</a></p>",$headers);

and on activate.php

$email = $_GET['email'];

thanks anyway!