After the form is submitted, WM Form4Events generates a random secure token and stores the registration with the status pending. The registration email contains the confirmation link generated from this token.

The link first opens a confirmation view containing the event details. The status is changed only after the user clicks the confirmation button. Immediately beforehand, the plugin checks again whether the record is valid and whether capacity is still available.

After successful confirmation, the confirmation email is sent with a secure cancellation link.