Hi navaldesign,

You do it just like that uh? Very simple indeed.
This activate.php program checks the "users" table and changes the login_ok field from 0 to 1 or N to S.
This is only to checkout the existence or not of the user email, so I guess there aren't any security issues with it.
At the end of the activate.php program do You normally "place" them inside the reserved area, or send them to the login page?
Just Your opinion as a programmer?

Thanks for sharing Your opinion,
pipesportugal