[seizeheures]

I personally love the idea of having users log in with a temporary token sent by email, and have been doing so in my own projects for a while now. However, I don't think sending them a link is a good idea, since it just gets them used to clicking on things in their emails, which could potentially lead them being phished quite easily.

[luord]

You make a fair point against sending links in emails, so how do you implement the token in the email? I'd like to start doing that in my own projects too.