added session variable to check confirmation

$_SESSION['confirmed']
if empty means user not confirmed