Email Verification and Account Activation

Last updated: July 01, 2026

To ensure account security and prevent fraudulent registrations, ASH-Booking requires email verification before a user can access the system.

How It Works

1. User registers by entering email, name, password
2. System sends an email with a verification link
3. User clicks the link to confirm the email
4. Account is activated
5. A temporary password is sent via email
6. User can now access the system

For New Users

Complete Registration

After submitting the registration form:

1. Check your email inbox
2. Open the verification email (subject: "Confirm your registration")
3. Click the "Confirm account" link
4. You'll receive an email with login credentials
5. Change the recommended password on first login

Tip: If you can't find the email, check the Spam folder or request a new send from the registration page.

Email Not Received?

If you don't receive the email within 5 minutes:

1. Return to the registration page
2. Click "Resend verification email"
3. Check your inbox again (and Spam)
4. Verify you entered the correct email

Link Expired

Verification links have limited validity. If expired:

1. Request a new link from the page
2. Previous link will be invalidated
3. Use only the last link received

For Administrators

Check Verification Status

In the user record you can see:

• Verified — email confirmed
• Not verified — email not yet confirmed
• Verification date — when it was verified

Resend Verification Email

If a user doesn't receive the email:

1. Open the user record
2. Click Send activation email
3. System generates a new password
4. User will receive email with new credentials

Warning: Resending generates a new password, invalidating the previous one. Warn the user before proceeding.

Block Access for Unverified Users

The is_verified middleware automatically blocks admin panel access for all unverified users.

An unverified user:

• Can register
• Can request new link
• Cannot access the panel until verification

For Customers (Mobile App)

Registration via App

1. Open ASH-Booking app
2. Click Register
3. Enter your data
4. Receive verification email
5. Click link to confirm
6. Login with credentials

Verify Email in App

After registration, if not yet verified:

1. App shows verification request message
2. Click Verify email
3. Check your inbox
4. Open link from app (or browser)
5. Return to app for completion

Security

Bot Protection (Turnstile)

Registration form is protected by Cloudflare Turnstile:

• Invisible verification to prevent automatic registrations
• No CAPTCHA solving required
• Prevents fake email spam

Real-Time Email Validation

When you enter your email:

• System verifies in real time if it's valid
• If seems wrong, warns you
• Can still proceed (but might not receive email)

IP Blocking for Fake Attempts

IPs making too many fake attempts are temporarily blocked.

Frequently Asked Questions

Can I use a temporary email?

No, temporary emails are blocked. Use a valid personal email.

What happens if I change email after registration?

You must verify the new email before you can log in.

Can the link be used multiple times?

No. Once used, the link is invalidated and cannot be reused.

Can I register two accounts with the same email?

No. Email can be used for only one account.