note 100648 deleted from function.sha1 by thiago
| From: | thiago@php.net | Date: | Thu, 28 Oct 2010 14:32:24 +0000 |
| Subject: | note 100648 deleted from function.sha1 by thiago | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-173553@lists.php.net to get a copy of this message | ||
Note Submitter: x
----
@Anonymous 25-Apr-2010 01:03
I think it's a bad example. What if I need 30 days time span? Do I need to 30s (just a number)
waiting for the page to load?
There's a proper way for this kind of usage. Put the timestamp into the token as plain text and
use HMAC to create the hash of the token (with the salt as the private key) and append it to the
token.
http://en.wikipedia.org/wiki/HMAC