I though of closing this thread, but I've got one more question to ask.So , i even edited the subject of the thread.
I'm doing some e-mail activation like by providing in a link in the user email which he has submitted in the contact and it works fine.
$statement="UPDATE $mytable SET activated='1' WHERE activated='$rstr'";
echo '<hr />';
$statement="UPDATE $mytable SET activated='1' WHERE activated='".$HTTP_GET_VARS['id']."'";
echo "Your e-mail has been activated.You will receive the profile details soon.";
$sql=mysql_query($statement) or die(mysql_error());
$rstr is the random string which is generated.
My question is😮nce the user activates his email by clicking on the link, he gets the message which is inside the echo statement.
Now the link which he gets in the email looks like:
http://www.blahblah.com/project/activate.php?id=cddaaaeba
I closed the browser and opened a new one and typed exactly without the id=cddaaaeba and with a different string.In both the cases i got the message which is inside the echo statement.Though the table does'nt get updated, but still i dont want to see such a message.
How best I can do this one?
Thanks