myaac/system/pages/account/lost/check-code.php

<?php
defined('MYAAC') or die('Direct access not allowed!');

csrfProtect();

$title = 'Lost Account';

$code = $_REQUEST['code'] ?? '';
$character = $_REQUEST['character'] ?? '';

if(empty($code) || empty($character)) {
	$twig->display('account/lost/check-code.html.twig', [
		'code' => $code,
		'characters' => $character,
	]);
}
else {
	$player = new OTS_Player();
	$account = new OTS_Account();
	$player->find($character);
	if($player->isLoaded()) {
		$account = $player->getAccount();
	}

	if($account->isLoaded()) {
		if($account->getCustomField('email_code') == $code) {
			$twig->display('account/lost/check-code.finish.html.twig', [
				'character' => $character,
				'code' => $code,
			]);
		}
		else {
			$error = 'Wrong code to change password.';
		}
	}
	else {
		$error = "Account of this character or this character doesn't exist.";
	}
}

if(!empty($error)) {
	$twig->display('error_box.html.twig', [
		'errors' => [$error],
	]);

	echo '<br/>';

	$twig->display('account/lost/check-code.html.twig', [

	]);
}