There may be many different ways to do this. The requirements are that references to the "magic" confirmation are very difficult to synthesize. In other words, it should be that the only way to get a link to confirm work is to go through the registration process.
You can generate random (very large) numbers and use them as keys, but this is usually not very safe (since "random" usually does not mean " really random"). Another approach is to use "secret" information that only an authorized user and the site itself can know, and then a hash. A combination of these two approaches will also work.
, , "" . URL, . ( " " URL , , ).
, "" , .