|
Basically, a member of your server clicks "invite" and the server creates a hash of the current time + some random salt string. This hash is added to a database with an expiration time of say, 24 hours to a week. If the user picks it up in the email by then, and the hash matches that which is in the database for that users email; they're allowed to register. Otherwise, it expires and can not be used.
|