php确认电子邮件脚本忽略验证步骤 - php confirm email script ignores a validation step

php confirm email script ignores a validation step

我从这里下载了一个neswletter订阅php脚本：http://www.plus2net.com/php_tutorial/newsletter.php

脚本应该检查订阅者是否已经确认了他的电子邮件地址。由于某些原因，此检查总是被忽略。。。我无法成功显示脚本中的错误消息"您已确认订阅。"。。我谨此复制剧本。有人看到我在这里缺了什么吗？该脚本包含两个表：nl_confirm，包含confirm_id、email_id、email、word、dtt和status字段（其中包含尚未确认其电子邮件的用户列表）nl_email，包含字段email_id、电子邮件和状态，其中包含所有订阅者。如果未确认，则状态为F。A确认后。。。

这是confirm.php脚本：

<!doctype html public "-//w3c//dtd html 3.2//en">
<html>
<head>
<title></title>
<META NAME="DESCRIPTION" CONTENT=" ">
<META NAME="KEYWORDS" CONTENT="">
<link rel="stylesheet" href="style.css" type="text/css">
</head>
<body>
<?Php
require "config.php";
$confirm_id=$_GET['confirm_id'];
$count=$dbo->prepare("
    select confirm_id,email,email_id,word,status,UNIX_TIMESTAMP(dtt) as stored_time 
    from nl_confirm where confirm_id=:confirm_id");
$count->bindParam(":confirm_id",$confirm_id,PDO::PARAM_INT,4);
if($count->execute()){
    $row = $count->fetch(PDO::FETCH_OBJ);
    if($row->confirm_id >0){
        ///////// checking the input data with record ////////////
        $flag='OK';
        $msg='';
        if($row->email_id <> $_GET['email_id']){
            $flag='NOTOK';
            $msg.='<br>Wrong Email address ';
        }
        if($row->word  <> $_GET['token']){
            $flag='NOTOK';
            $msg.='<br>Wrong Token';
        }
        if($row->email <> $_GET['email']){
            $flag='NOTOK';
            $msg.='<br>Wrong Email address ';
        }
        $present_time=time();
        $stored_time=$row->stored_time;
        //echo 'stored time : '.$row->stored_time.'<br>Present time : '. $present_time.'<br>' ;
        if(($present_time-$stored_time)>300){ 
            //// Within 300 seconds user needs to confirm subscription , you can adjust this duration ////
            $flag='NOTOK';
            $msg.='<br>It is too long. Your confirmation time expired. <a href=subscribe.php>Subscribe again</a> ';
        }
        if($row->status == 'A'){
            $flag='NOTOK';
            $msg.='<br>You have already confirmed your subscription. ' ;
        }
        if($flag=='OK'){
            $count1=$dbo->prepare("update nl_email set status='A' where email_id=$row->email_id");
            if($count1->execute()){
                $count2=$dbo->prepare("delete from  nl_confirm where confirm_id=$row->confirm_id");
                $count2->execute();
                echo "Thank you for confirming your email address. You are a subscriber of our newsletter script.
    <br> Any time you can unsubscribe by visiting a link in your newsletter. ";
            }
        }
        else{echo $msg.'<br>';}
        //////////// end of checking data /////////////
    }else{ // if condition to check confirm_id > 0
        echo " We don't have any record of pending confirmation against your email address,<br>
     you can check by <a href=subscribe.php>subscribing</a> again or contact site admin.";
    } // end of if else to check confirm_id >0
}else{ // if execute() fails 
    print_r($dbo->errorInfo()); 
}
//////////////////////////////////////////////
echo "</body></html>";

您是否尝试删除这部分代码开头和结尾的两个**？

**if($row->status == 'A'){
$flag='NOTOK';
$msg.='<br>You have already confirmed your subscription. ' ;
}**