Please make it so website users can delete their own accounts through a form, with password confirmation and an email confirmation.
Right now, a few of my websites have a form that users can submit. When they submit it, they are sent a confirmation email. They must click the CONFIRM button in the email, which takes them to a hidden page that has a small form. They have to complete the reCAPTCHA and then submit the form, which then sends an email to me, notifying me that they want their account deleted. Then, I have to delete their accounts.
One of my websites that uses this concept can be found at https://dotwebjw.wixsite.com/jwbrowseraddons .
The problem is my current method is not secure. It uses the same URL every time, so they can send the delete request without having to go through the confirmation process. I would like it if it could generate a token that expires within a specific amount of time.