Index: openacs-4/packages/acs-subsite/lib/email-confirm.tcl =================================================================== RCS file: /usr/local/cvsroot/openacs-4/packages/acs-subsite/lib/email-confirm.tcl,v diff -u -r1.2 -r1.2.2.1 --- openacs-4/packages/acs-subsite/lib/email-confirm.tcl 7 Aug 2017 23:47:57 -0000 1.2 +++ openacs-4/packages/acs-subsite/lib/email-confirm.tcl 14 Mar 2019 16:06:11 -0000 1.2.2.1 @@ -1,3 +1,11 @@ +ad_include_contract { + Verify users's email by checking the authentication token. + People normally come here from a confirmation email. +} { + user_id:integer,notnull + token:word,notnull +} + if {![db_0or1row userp {select 1 from users where user_id = :user_id}] || $token ne [auth::get_user_secret_token -user_id $user_id] } { set title "Bad token"