php reset password links
php
Solution
After the link is used mark the confirmation code as used/invalid so it cannot be used again.
Problem
I have create a user login system. In my forgot password page. I use php email to user. User will receive an email with a link link- ``` ....?email=abc@gmail.com&confirm_code=uefu8878ef... ``` user can click this links to the access the reset_password page. However this is using GET, which is mean anyone can check browser history to access this page and reset the password. any suggestion?