如何用php编写注册后Email激活的验证代码

Posted on April 24, 2010 greenhawk

No Comment BOOKMARK

通过使用Email验证激活的方法，可以有效的帮你阻止恶意的Spam和注册机器人的访问。
用php编写注册后Email验证激活的步骤非常简单，相信几分钟之内你就能学会。
总共需两个页面，register.php 和 verify.php

1. 用户注册表格 register.php

<html>
<body>
  <form action="register.php" method="post" name="register">
     用户名：<input type="text" name="username" />
     密码：<input type="password" name="password" />
     电子邮件：<input type="text" name="email" />
     <input type="submit" value="注册" />
  </form>
</body>
</html>

2. 创建用户数据表格 Users

CREATE TABLE IF NOT EXISTS `users` (
  `id` int(11) NOT NULL auto_increment,
  `status` varchar(20) NOT NULL,
  `username` varchar(20) NOT NULL,
  `password` varchar(20) NOT NULL,
  `email` varchar(20) NOT NULL,
  `activationkey` varchar(100) NOT NULL,
  PRIMARY KEY  (`id`),
  UNIQUE KEY `username` (`username`),
  UNIQUE KEY `email` (`email`),
  UNIQUE KEY `activationkey` (`activationkey`)
) ENGINE=MyISAM  DEFAULT CHARSET=latin1 AUTO_INCREMENT=9 ;

3. 创建验证码用户注册信息存入数据表

我们使用状态‘verify’ 来表示尚未激活的用户。

$activationKey =  mt_rand() . mt_rand() . mt_rand() . mt_rand() . mt_rand();

$username = mysql_real_escape_string($_POST[username]);
$password = mysql_real_escape_string($_POST[password]);

$email = mysql_real_escape_string($_POST[email]);

$sql="INSERT INTO users (username, password, email, activationkey, status) VALUES ('$username', '$password', '$email', '$activationKey', 'verify')";

4. 发送验证码

echo "An email has been sent to $_POST[email] with an activation key. Please check your mail to complete registration.";

##Send activation Email

$to      = $_POST[email];
$subject = " YOURWEBSITE.com Registration";
$message = "Welcome to our website!\r\rYou, or someone using your email address, has completed registration at YOURWEBSITE.com. You can complete registration by clicking the following link:\rhttp://www.YOURWEBSITE.com/verify.php?$activationKey\r\rIf this is an error, ignore this email and you will be removed from our mailing list.\r\rRegards,\ YOURWEBSITE.com Team";

$headers = 'From: noreply@ YOURWEBSITE.com' . "\r\n" .

    'Reply-To: noreply@ YOURWEBSITE.com' . "\r\n" .

    'X-Mailer: PHP/' . phpversion();

mail($to, $subject, $message, $headers);

5. 验证激活代码 verify.php

如果验证码相同，则激活用户。

$queryString = $_SERVER['QUERY_STRING'];

$query = "SELECT * FROM users";
$result = mysql_query($query) or die(mysql_error());

while($row = mysql_fetch_array($result)){

    if ($queryString == $row["activationkey"]){
       echo "Congratulations!" . $row["username"] . " is now the proud new owner of a YOURWEBSITE.com account.";
       $sql="UPDATE users SET activationkey = '', status='activated' WHERE (id = $row[id])";
       
       if (!mysql_query($sql)) {
          die('Error: ' . mysql_error());
       }
       
        // 到这里，用户已经完全激活了账号，你可以将页面跳转到登陆后的界面了 

    }
  } // end of while