Пример Анализа принципа генерации проверки токенов PHP

php
/**
 * @Author: Ding Jianlong
 * @Date:  2019-03-20 00:38:01
 * @Last Modified by:  Ding Jianlong
 * @Last Modified time: 2019-03-22 17:50:59
 */
// Generate validation token for sending requests
// The key here can be content containing user information, without user + different permissions
function makeToken($key){
 // Effective within 100 seconds, unchanged, time adjusted according to actual needs. Third party login authorization 15 days.
 return $token = md5($key.sha1(substr(time(),3,7)));
}
// Background equivalence verification,
function checkToken($key,$token){
 $true = md5($key.sha1(substr(time(),3,7)));
 if($token == $true){
 Return true; //token correct
 }else{
 return false;
 }
}
$key = 'https://github.com/idjl/';
echo $t = makeToken($key);
var_dump(checkToken($key,'259521122'));
var_dump(checkToken($key,$t));
var_dump(checkToken($key,'259521122'));