<?php
include('../common/send_email.php');
include('../common/connect.php');
// First we check if the email and code exists...
if (isset($_GET['email'], $_GET['code'])) {
	if ($stmt = $con->prepare('SELECT * FROM student WHERE email = ? AND activation_code = ?')) {
		$stmt->bind_param('ss', $_GET['email'], $_GET['code']);
		$stmt->execute();
		// Store the result so we can check if the account exists in the database.
		$stmt->store_result();
		if ($stmt->num_rows > 0) {
			// Account exists with the requested email and code.
			if ($stmt = $con->prepare('UPDATE student SET activation_code = ? WHERE email = ? AND activation_code = ?')) {
				// Set the new activation code to 'activated', this is how we can check if the user has activated their account.
				$newcode = 'activated';
				$stmt->bind_param('sss', $newcode, $_GET['email'], $_GET['code']);
				$stmt->execute();
				echo 'The account is now activated! The student can now <a href="index.html">login</a>!';

				// Send email to the student
				sendEmail($EMAIL_HOST, $EMAIL_USERNAME, $EMAIL_PASS, $EMAIL_FROM, $_GET['email'], 'Your account has been activated', 'You can now <a href="https://' . dirname($_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI']) .'/index.html">login</a>!', '', null);
			}
		} else {
			echo 'The account is already activated or doesn\'t exist!';
		}
	}
}
?>