title: Verification link not activating account
body: <p>So I've sent a link after registration to Verify an account, the link contains the users email address and a 32 character code for example:</p>
  
  <pre><code>                $to      = $email;
                  $subject = 'Signup | Verification';
                  $message = '
  
                  Thanks for signing up!
                  Your account has been created, you can login with the following credentials after you have activated your account by pressing the url below.
  
                  ------------------------
                  Username: '.$username.'
                  Password: '.$password.'
                  ------------------------
  
                  Please click this link to activate your account:
                  localhost:8888/website/verify.php?email='.$email.'&amp;hash='.$hash.'
                  '; 
  
                  $headers = 'From:myemail@email.com' . "\r\n"; 
                  mail($to, $subject, $message, $headers); 
  </code></pre>
  
  <p>That all seems to work fine I'm receiving the email with a link like this:</p>
  
  <pre><code>http://localhost:8888/website/verify.php?email=myemail@email.com&amp;hash=fe646d38bc2145ca6c3cf77d52820cd0
  </code></pre>
  
  <p>The problem comes when I follow the link and try to activate the account. It takes me to Verify.php fine but I keep getting Invalid Approach and I'm unable to set Validation to 1. </p>
  
  <pre><code>    &lt;?php include "includes/base.php"; ?&gt;
  
      &lt;?php
  
          if(isset($_GET['Email']) &amp;&amp; !empty($_GET['Email']) AND isset($_GET['Hash']) &amp;&amp; !empty($_GET['Hash'])){
              $email = mysql_escape_string($_GET['Email']); 
              $hash = mysql_escape_string($_GET['Hash']); 
              $search = mysql_query("SELECT Email, Hash, Validation FROM users WHERE Email = '".$email."' AND Hash = '".$hash."' AND Validation = 0") or die(mysql_error()); 
              $match  = mysql_num_rows($search);
  
  
              if($match &gt; 0){
                  mysql_query("UPDATE users SET Validation = 1 WHERE Email = '".$email."' AND Hash = '".$hash."' AND Validation = 0") or die(mysql_error());
                  echo "Your account has been activated, you can now login";
              }else{
                  echo "The url is either invalid or you already have activated your account.";
              }
  
          }else{
              echo "Invalid approach, please use the link that has been sent to your email.";
          }
  
  
      ?&gt;
  </code></pre>