When you set up the users' account, I imagine you populate a table(s) with that users' information, leats of which is his/her email address. At that point why don't you also have two more fields, one field that is something like "accountactive" which can be a bit type ( True/False )and another field with a random string of letters and numbers.
Also write up a simple page that will request variables in a URL. Now, when you send the user his/her verification email with a url to click on...it will have the unique identifier in the URL.
When the user clicks on the URL, the page you wrote will search DB for that unique identifier, and update the accountactive flag to True or 1 .
You could otherwise place another random password in the email, and when the user clicks on the URL, must submit that temporary activation password. That would also work.
Hope that Helps
JP _______________________________________________
OutsideIntranets.com
Stop wasting time, get to work