Send a verification code in the link which will identify them provide you maintain a record of all verification codes, once it is clicked it cannot used by anyone. You might have to maintain a table with some basic user info to whom you are emailing the form for approval.

Thank you verr much.
I'm stuck for days and I love this idea!

Let me know if you need some help we can work out something.

Thanks !!
Honestly, I know nothing about verficiation code.
I've googled on it and found some code regarding generating of verification code.

May I ask if I am correct like this?

My database table
user(userId, name, email)
project(projectId, userId, status, reason, v_code)

*status = approved/rejected.

My problem now is I don't know how to generate the URL (with the v_code) in the email.

Next, how can I "disable" the link after the user has approve/reject the documents?

By the way, I'm building a web app in a Intranet environment.

Thanks for your help. =)

Do not append it in the url, rather direct them to a verification page which has a text box, where user would have to copy and paste the verification code from email.

Hi, thanks for your reply, just to clarify something..

approvalParties (APId, projectId, name, designation, email, watcherEmail)

ver_code (v_code, apid)

am I right?

You said this requests can goto only designated people. So is anyone allocated to a particlar project? Can the same request goto multiple people? If then you might have to add user_id in ver_code

yeah. But these people don't have a userid , so i actually gave them an id in the table approvalParties.

Erm, then I can use the apid to identify them, am i right to say so?

Yes, if app id is only for one user then you can.