Re: best practice question..

Hello Guy, Thursday, December 9, 2004, 12:34:03 PM, you wrote: GB> There's never a security issue here - i.e. i don't mind how many times / GB> who reads the message, but just want to make it hard to just guess keys GB> to read other messages (otherwise it would just be the db id) GB> This method works for me, but is it the *right* way? There's no right or wrong way to do this - if it works for you, then it works :) The only thing I would strongly suggest is a check somewhere - if the recipient has been sent an email already (perhaps within the last 30 days?) then you don't send them another one. That way you're not open to being a spam bot. Best regards, Richard Davey -- http://www.launchcode.co.uk - PHP Development Services "I am not young enough to know everything." - Oscar Wilde