Note: This uses a placeholder code (OTP) for security demo purposes. See db_config.php for credentials.