Posted by J.O. Aho on 02/14/07 10:15

weetat wrote:
> Hi all ,
>
> I have question regarding user authentication in php.
> Anybody have any ideas how to verify user authentication to activate
> account?

1. You ask for a e-mail address
2. When you store the user in the database (easiest) have a column where you
store a unique random string
3. send e-mail to the user where you ask them to go to your auth-page, you add
the random string as an argument for the page
http://www.example.net/auth.php?id=randomstring
4. auth-page which takes the random string as argument, checks the string
against the database, to auth the user you can empty the column.

All user with the auth column empty would be authenticated.



--

//Aho

[Back to original message]