Hi, i have a few questions in relation to account activation, which i hope someone can help me with:
01 - when a user creates an account, should we limit the time in which they can activate the account using the link in their email
02 - if so, how should we handle the link if the token no longer appears in the database
03 - is there anything i need to look out for in terms a user misusing the link below
www.website.com/activate-account?id=1&token=bd335a180623348g6e40baf50df17a30a67d9ea4
Thanks in advance for your help