Question

When a user clicks Forgot Password a token is created as a link to be sent in email.
User clicks the link, the token is checked in database for existence and expiry. All is well so a new password form is shown and the user enters a new password. It gets hashed, salted and stored in the user table. I have this sorted up to this point but what I cannot figure out is why I now have 2 instances of this web app open.
Is there some way to have the email link go back to original signup page without having to be opened in a new window?
My script is php and mysql.
My link looks like this:
http://www.mysite.com/resetpassword.php?token=$token

Answer 1

You cannot control how the user opens the tabs of his applications.

If he clicked Forget Password in one tab, opened his email account in another, and opened your token link in a third, you cannot control it.