<?php

header("Content-Type: application/json");

include "../config/db.php";

$email = $_POST['email'];
$otp   = $_POST['otp'];

$sql = "SELECT * FROM users
        WHERE email='$email'
        AND otp='$otp'
        AND otp_expire > NOW()";

$result = $conn->query($sql);

if($result->num_rows > 0){

    $conn->query("
        UPDATE users
        SET is_verified=1,
            otp=NULL,
            otp_expire=NULL
        WHERE email='$email'
    ");

    echo json_encode([
        "status"=>"success",
        "message"=>"Email verified"
    ]);

}else{

    echo json_encode([
        "status"=>"error",
        "message"=>"Invalid OTP"
    ]);
}