Store all the database info in a separate temporary table, and send an email for verification. In the email, tell the user to go to a certain webpage that will pass a hash value verifying to you that they received the email, then switch the data from the temp table to the master table. If the email is invalid, they don't get the hash value. If they don't get the hash value, the data won't be switched to the master dbase. Also, you would have to put an expiration date on yr old temp records, and have the script look for the expired ones and delete them.
Just an idea,
Justin