title: Codeigniter - form for resetting password
body: <p>I have a system consisting of a PHP API with Codeigniter and REST_Controller. </p>
  
  <p>When a user asks to reset their password, the system generates a random number and embeds it in a URI that is sent by a mail to the user. </p>
  
  <p>When the user clicks it, it calls a function in REST_Controller/Codeigniter that reads the embedded number and detemines, if it is valid. If yes, the user is presented with a website with a form to change the password. </p>
  
  <p>Now, for the main question. When the user clicks the Submit button to send the new password, does the client side have to call another function in REST_Controller/Codeigniter? If so, how can I authenticate that the Submit request with data is from the user, and not a random reqest from the internet?</p>
  
  <p>What am I missing here? </p>