This method seems to be storing password reset url, this is pretty bad from my point of view. As I told you, it should never ever be stored into the system. Store password reset urls, is to assume that anyone with some acess to the database is able to reset my password, which defeats the purpose.