What are the best practices for storing and retrieving activation links in a PHP MySQL database?

When storing activation links in a PHP MySQL database, it is important to ensure the links are securely stored and retrieved to prevent unauthorized access. One best practice is to generate a unique activation code for each user and store it along with the user's information in the database. When retrieving the activation link, verify the code matches the user's information to ensure it is valid. 

// Store activation link in database
$activationCode = generateActivationCode();
$userEmail = "user@example.com";

$sql = "INSERT INTO activation_links (email, activation_code) VALUES ('$userEmail', '$activationCode')";
$result = mysqli_query($conn, $sql);

// Retrieve activation link from database
$activationCode = $_GET['activation_code'];
$userEmail = $_GET['email'];

$sql = "SELECT * FROM activation_links WHERE email = '$userEmail' AND activation_code = '$activationCode'";
$result = mysqli_query($conn, $sql);

if(mysqli_num_rows($result) > 0) {
    // Activation link is valid, proceed with activation process
} else {
    // Invalid activation link
}

Keywords

PHP MySQL activation links security encryption

Related Questions