invisio v2.0

<?php
include('config/main_function.php');
$secure = "cAh3DrJACzw4RbU";
$connection = connectDB($secure);

$identification_code = mysqli_real_escape_string($connection, $_GET['id']);

// หา member ที่มี identification_code ตรงกัน
$find_member = "SELECT * FROM tbl_member WHERE identification_code = '$identification_code';";
$rs_find_member = mysqli_query($connection, $find_member);
$row_find_member = mysqli_fetch_array($rs_find_member);
$num_rows = mysqli_num_rows($rs_find_member);

if ($num_rows > 0) { // ถ้าพบ

if ($row_find_member['identificate_datetime'] == "") { // และยังไม่ยืนยันตัวตน

$identificate_datetime = date('Y-m-d H:i:s');

$update_identificate = "UPDATE tbl_member SET
            
                                    identificate_datetime = '$identificate_datetime',
                                    register_level = '0'
                                    
                                    WHERE member_id = '{$row_find_member['member_id']}';";

$rs_identificate = mysqli_query($connection, $update_identificate) or die($connection->error);

if ($rs_identificate) {

$result = 1;

$key_login = randomCode(10);

$pointer_login = rand(0, 9);

$step_1 = bigsara_encode($row_find_member['member_id'], $key_login, $pointer_login); //Login Code

// เอา Login Code ต่อคำกับ $step 1

$login_code = $step_1 . "." . $key_login;

$username = $row_find_member['username'];
            $member_level = $row_find_member['member_level'];
            $register_type = $row_find_member['register_type'];
        } else {

$result = 4;
        }
    } else { // ถ้ามัการยืนยันตัวตนแล้ว

$result = 2;
    }
} else { // ไม่พบ identification_code ในระบบ

$result = 0;
}

/////////////////////////////////////////////////////////////////////////////////////////// ส่งกลับให้ User

if ($result == 1) { ?>

location.href = "main/index";
    </script>

<?php } else if ($result == 2) { ?>

<?php } else { ?> 
    <script>
        location.href = "notfound";
    </script>
<?php } ?>