[madar1985]

I already have a site with users and everything.

I want to allow users to change their e-mail and passwords, but I want them to have to confirm it through e-mail.

I'm just not really sure how I should go about it.

I was considering generating a random string, then sending them an e-mail with a link containing that code, but that would require me to add 2 extra fields to the users table, one for the code and one for new e-mail/password, which seems like a waste.

Any one done this before, or have any suggestions?

I'm using php4 and mysql. This is more of a psuedocode question, rather than php, considering I'm fairly good with php.