You should incorporate a test to see if a ticket key/email exists in the database and return a default error page if does not.
Log in to post a comment.