verify.php

<?php
session_start();
include('config.php');
include('sessioncheck.php');

$uid = $_SESSION['log']['useruid'];
$error_message = '';
$success_message = '';

// --- OTP PROCESSING LOGIC ---
if ($_SERVER["REQUEST_METHOD"] == "POST") {
    $car = $_POST['car'];
    $date = $_POST['datetimelocal'];

    if (isset($_POST['otp_type']) && $_POST['otp_type'] == 'otp1') {
        // Logic from otp1.php
        $otp1 = $_POST['otp1'];
        $qry = mysqli_query($conn, "SELECT * FROM logtable WHERE otp1='$otp1' AND useruid='$uid'");
        if (mysqli_num_rows($qry) > 0) {
            $row = mysqli_fetch_array($qry);
            if ($row['carno'] == $car) {
                mysqli_query($conn, "UPDATE logtable SET fromtime='$date', status='Park' WHERE otp1='$otp1'");
                mysqli_query($conn, "UPDATE lot SET status='Booked' WHERE lotname='{$row['lotname']}'");
                $success_message = "Verification successful! You may now park your car.";
            } else {
                $error_message = "Invalid Car Number for this booking.";
            }
        } else {
            $error_message = "Invalid OTP entered.";
        }
    } 
    elseif (isset($_POST['otp_type']) && $_POST['otp_type'] == 'otp2') {
        // Logic from otp2.php
        $otp2 = $_POST['otp2'];
        $qry = mysqli_query($conn, "SELECT * FROM logtable WHERE otp2='$otp2' AND useruid='$uid'");
        if (mysqli_num_rows($qry) > 0) {
            $row = mysqli_fetch_array($qry);
            if ($row['carno'] == $car) {
                mysqli_query($conn, "UPDATE logtable SET totime='$date', status='Left' WHERE otp2='$otp2'");
                mysqli_query($conn, "UPDATE lot SET status='Leaving' WHERE lotname='{$row['lotname']}'");
                // Redirect to payment page
                header("Location: fee.php");
                exit();
            } else {
                $error_message = "Invalid Car Number for this booking.";
            }
        } else {
            $error_message = "Invalid OTP entered.";
        }
    }
}

include('header.php');

// --- FORM DISPLAY LOGIC ---
$qry_status = mysqli_query($conn, "SELECT * FROM logtable WHERE useruid='$uid' ORDER BY id DESC LIMIT 1");
$booking_data = mysqli_fetch_array($qry_status);
?>

<div class="form-container">
    <div class="form-wrapper">
        <h1 class="form-title">Parking Verification</h1>
        
        <?php if (!empty($success_message)): ?>
            <div class="success-banner"><?php echo $success_message; ?></div>
        <?php endif; ?>
        <?php if (!empty($error_message)): ?>
            <div class="error-banner"><?php echo $error_message; ?></div>
        <?php endif; ?>

        <?php
        // If status is 'Park', show OTP2 form. Otherwise, show OTP1 form.
        if ($booking_data && $booking_data['status'] == 'Park') {
        ?>
            <!-- OTP2 Form (Leaving) -->
            <p class="form-subtitle">Enter your second OTP to check out and leave the parking lot.</p>
            <form method="post" action="verify.php" class="modern-form">
                <input type="hidden" name="otp_type" value="otp2">
                <div class="form-group">
                    <label for="otp2">OTP-2 (While Leaving)</label>
                    <input type="number" id="otp2" name="otp2" placeholder="Enter your second OTP" required>
                </div>
                <div class="form-group">
                    <label for="car">Car Number</label>
                    <input type="text" id="car" name="car" value="<?php echo htmlspecialchars($booking_data['carno']); ?>" required>
                </div>
                <input type="hidden" name="datetimelocal" value="<?php echo date("Y-m-d\TH:i:s"); ?>">
                <div class="form-group">
                    <button type="submit" class="button button-primary form-button">Verify & Proceed to Pay</button>
                </div>
            </form>
        <?php
        } else if ($booking_data && $booking_data['status'] != 'Left' && $booking_data['payment'] != 'Paid') {
        ?>
            <!-- OTP1 Form (Parking) -->
            <p class="form-subtitle">Enter your first OTP to confirm your arrival and park your car.</p>
            <form method="post" action="verify.php" class="modern-form">
                <input type="hidden" name="otp_type" value="otp1">
                <div class="form-group">
                    <label for="otp1">OTP-1 (While Parking)</label>
                    <input type="number" id="otp1" name="otp1" placeholder="Enter your first OTP" required>
                </div>
                <div class="form-group">
                    <label for="car">Car Number</label>
                    <input type="text" id="car" name="car" value="<?php echo htmlspecialchars($booking_data['carno']); ?>" required>
                </div>
                <input type="hidden" name="datetimelocal" value="<?php echo date("Y-m-d\TH:i:s"); ?>">
                <div class="form-group">
                    <button type="submit" class="button button-primary form-button">Verify & Park</button>
                </div>
            </form>
        <?php
        } else {
        ?>
            <p class="form-subtitle">You have no active bookings to verify.</p>
            <a href="book.php" class="button">Book a Slot</a>
        <?php
        }
        ?>
    </div>
</div>

<?php
include('footer.php');
?>