I was testing the registration by invitation only and it sent the email correctly with the correct Url and a parameter of idXxxxxx=1
so http://yoursite.com/?idXxxxxx=1
The url and parameter=1 worked fine but if I input the url http://yoursite.com/?idXxxxxx=2 that worked too which should not.
Parameter=3 and so on does not work