The problem with the above is that the value of $token does not appear in the link.
This is what gets printed in the browser: http://localhost/Appointments/Frontend/pass_reset.php?t=
that’s caused by the " just before you add the number. it prematurely closes the attribute value. see the HTML source code vs. the DOM tree (use the dev tools for that).