I have system to send e-mail activation link to new user after he signed on web site.

He has his password.

I need help what should be in db changed and checked that pages are not visible. Should I reset password or check on all pages activation field in MySQL table (I have activation set to 1 if he confirms link in his e-mail).

Should I store variable activation in SESSION variable and track this?

Do you have any suggestion?