Hi, i have a few questions in relation to account activation, which i hope someone can help me with:

01 - when a user creates an account, should we limit the time in which they can activate the account using the link in their email

02 - if so, how should we handle the link if the token no longer appears in the database

03 - is there anything i need to look out for in terms a user misusing the link below


Thanks in advance for your help