onlyican Posted August 13, 2006 Share Posted August 13, 2006 HeyI have created an affiliation scriptThe affiliates log in and can check how much money they madeThe admin uses the email address provided on registration to pay them with paypal.The affiliate logs in using there email address and passwordNOWI was thinking, what if the user needs to change the email address for some reason, as we are talking about money here, what is the best way to do thisOne idea I had was to send an email to the affiliate to there OLD email address, to confirm the changes.This way, if someone else did hack in and change the email address so they get paid, the other guy knowsAnyone got any better ideas? Quote Link to comment Share on other sites More sharing options...
hostfreak Posted August 13, 2006 Share Posted August 13, 2006 That sounds like the best idea to me. Quote Link to comment Share on other sites More sharing options...
ScottRiley Posted August 13, 2006 Share Posted August 13, 2006 Yeah, I'd say so, send them an e-mail saying that someone has requested a change in e-mail, ask them to confirm by e-mailing you a code you sent to their old address, from their new adress.eg company1@mail.com wants to change their address to company2@mail.comemail company1@mail.com with a code and an explanation of what has happened, ask them to e-mail you this code from company2@mail.com.Just a suggestion. Quote Link to comment Share on other sites More sharing options...
Orio Posted August 13, 2006 Share Posted August 13, 2006 When someone want's to change his email, add to their row in the database, in the column email_change_code, a random md5 string for example- $rand_code=md5("abc".time().rand(1000,9999)."123"). Then, send to company1@mail.com a email with the following link:www.domain.com/emailchange.php?code=$rand_code&id=$id ($id is the number that is set for the company in the table, in the auto increment field)emailchange.php will check if the value in $_GET['code'] is the same as in the database in the row where it's id is $_GET['id']. If there's a match, continue and change the email :)Orio. Quote Link to comment Share on other sites More sharing options...
onlyican Posted August 13, 2006 Author Share Posted August 13, 2006 I like that idea OrioThanks guys, I might finish this tomorrow Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.