PHP Forum

**Skeddles** · 06-07-2009, 08:44 PM

I already have a site with users and everything.

I want to allow users to change their e-mail and passwords, but I want them to have to confirm it through e-mail.

I'm just not really sure how I should go about it.

I was considering generating a random string, then sending them an e-mail with a link containing that code, but that would require me to add 2 extra fields to the users table, one for the code and one for new e-mail/password, which seems like a waste.

Any one done this before, or have any suggestions?

I'm using php4 and mysql. This is more of a psuedocode question, rather than php, considering I'm fairly good with php.

**NullPointer** · 09:04 PM

Rather than adding rows to the existing user table, you could create a user meta data table to store more generic data. Each row would contain a user id, a meta key, and a meta value. When a user needs to change their password, you can store the confirmation code in the meta data table and remove it after confirmation.

Given the following table structure

Code:

id | user id | meta key | meta value
0  | 1       | confirm  | randomstring

and the following URL

Code:

http://yoursite.com/verify.php?id=1&value=randomstring

verify.php

PHP Code:


			
$id = $_GET['id'];

$value = $_GET['value'];

//don't forget to sanitize this data



$query = "SELECT COUNT(*) FROM meta_data

WHERE meta_key = 'confirm' AND user_id = '$id' AND meta_value = '$value';";

.

.

.

As I mentioned, this method allows you to store generic data which is good if you plan to make future changes.

**Skeddles** · 06-07-2009, 10:28 PM

Quote:

Originally Posted by NullPointer

Rather than adding rows to the existing user table, you could create a user meta data table to store more generic data. Each row would contain a user id, a meta key, and a meta value. When a user needs to change their password, you can store the confirmation code in the meta data table and remove it after confirmation.

Given the following table structure

Code:

id | user id | meta key | meta value
0  | 1       | confirm  | randomstring

and the following URL

Code:

http://yoursite.com/verify.php?id=1&value=randomstring

verify.php

PHP Code:


			
$id = $_GET['id'];
$value = $_GET['value'];
//don't forget to sanitize this data

$query = "SELECT COUNT(*) FROM meta_data
WHERE meta_key = 'confirm' AND user_id = '$id' AND meta_value = '$value';";
.
.
.

As I mentioned, this method allows you to store generic data which is good if you plan to make future changes.

Sounds good, thanks. And I really like the 'meta' idea, that way I can use it for lots of things.