<?php
/**
 * register-activate.php -- Account activation
 * Converted from register-activate.php
 */
require_once __DIR__ . '/functions.php';
init_session();

$email = $_GET['email'] ?? '';
$urlId = $_GET['id'] ?? null;
$partner = $_GET['partner'] ?? '';
$country = $_SERVER['HTTP_CF_IPCOUNTRY'] ?? '';

// Validation
$blocked = [
    'dispostable.com', 'mailcatch.com', 'indiatimes.com', 'wmail.club',
    'club', '.info', 'banit.club', 'nokiamail.com', 'storj'
];
$valid = ($email !== '' && strpos($email, '@') !== false);
foreach ($blocked as $b) {
    if (stripos($email, $b) !== false) { $valid = false; break; }
}
if (in_array($country, ['IN', 'PK'])) { $valid = false; }

if ($valid):
?>
<table border="0" cellpadding="8" cellspacing="0" width="100%">
<tr>
<td valign="top">
<?php
    if ($urlId === null || !ctype_digit((string)$urlId)) {
        echo 'An error has occurred - missing ID. If this message persists, please <a href="https://www.broadwayworld.com/contact.cfm">Contact Us</a>.<p>';
        exit;
    }

    // Block known spam password
    $stmt = db_read()->prepare(
        "SELECT id FROM bway_bww.starusers WHERE password = '19558455' AND email = :email"
    );
    $stmt->execute([':email' => $email]);
    if ($stmt->fetch()) { exit; }

    // Clear denied cookie
    setcookie('denied', '', time() - 3600, '/');

    // Activate account — require email + id to match, and only flip unconfirmed rows
    $upd = db_write()->prepare(
        "UPDATE bway_bww.starusers
         SET confirmed = '1'
         WHERE email = :email AND id = :id AND confirmed = '0'"
    );
    $upd->execute([':email' => $email, ':id' => (int)$urlId]);
    if ($upd->rowCount() === 0) {
        echo 'Activation link is invalid or already used. If this message persists, please <a href="https://www.broadwayworld.com/contact.cfm">Contact Us</a>.<p>';
        exit;
    }
?>

<span class="header">Your Registration Has Been Activated!</span></strong><br>

<?php if ($partner !== ''): ?>
    <?php header('Location: https://stagemag.broadwayworld.com/programeditfill.php?partner=' . urlencode($partner)); exit; ?>
<?php else: ?>
    <a href="/">Click here to visit the homepage.</a>
<?php endif; ?>

</td></tr></table>
<?php endif; ?>