...
If user click twice on this link (could be because some users "double-click" on links, or when reading again automatic generated email), then the second message is displayed. Then the situation become unfriendly: user see "wrong code" message, while he is already validated, and even maybe logged-in. This may sound dumb for you, but I report this here because some of my users are encountering this problem, and contacted me to understand what they made wrong.I propose to display a nicer message when user try to validate again is email.
Solution
When code is invalid don't write just that, but show text (depending on usage context) indicating that code was already used to do whatever it's supposed to be used for:
- "Your password was already reset"
- "Your account is already activated, please proceed to login"