Expire php link

Question

I wonder how I do to expire a link after a use.

We have a password recovery system that sends an email to recovery that is working perfectly. In this case, if the link is not opened in 30 minutes, it expires, but I would like to know how to make this link expire after use, making it can not be used more than one view, someone has a tip to give?

Answer 1

I believe this can be solved as follows:

$hora = time(); 
$id = //id qualquer; 
$seulink = "ativacao.php?id=" . $id . "&hora'=" . $hora;

And in the active.php file you do the logica to check if the parameter $hora has a difference of more than half an hour from the current time. If it is larger, it does not allow activation.

You can also generate a hash based on the value of the current time and the ID (to prevent the user from changing the value of &hora manually) and validate whether that hash is possible at the time of checking in.php.

Since you want to disable the link after the first use, you can create a table in the database with two columns: id and jaUtilizado (Boolean) and the ativacao.php would make a select in the database by id passed via parameter in the url. If the column jaUtilizado is marked for that Id the activation for that point. If it is not marked, mark it and continue with the process.

Answer 2

For sure, you will have to save this information in the database.

I usually do the following:

• In the table referring to the user, when it asks for password recovery, record in a table field a randomly generated hash.

• For security reasons, I do not suggest you put the date in the url, as it can be manipulated. It is preferable to also save the date in the database.

The link can be like this:

meu_site/recupear_senha.php?token=token_que_vem_do_banco_de_dados

Next (Fictitious code):

$token = filter_input(INPUT_GET, 'token'); 

 // ou $token = $_GET['token']; //tanto faz

// Compara com a data de -30 minutos atrás
$data_expiracao = (new DateTime('-30 minutes'))->format('Y-m-d H:i:s'); 


$resultado = $query->execute("SELECT * FROM usuario WHERE token_email  = ? AND data_token >= ?", [$token, $data_expiracao]);

if ($resultado !== false) {

     // Pode confirar nesse token
     // Remove o token de email do banco
     $query->execute('UPDATE usuario WHERE token_email = ? SET token_email = NULL', [$token]);

} else {
   //Expirou, mano! Pede outra solicitação.
}

Answer 3

Here I did an example using an expiration method based on a period interval:

<?php 
    function expireDate($dateStart, $dateEnd) {
        $dateCurrent = new DateTime();

        $dateEnd = new DateTime($dateEnd);
        $dateEnd->format('Y-m-d H:i:s.uO');

        $dateStart = new DateTime($dateStart);
        $dateStart->format('Y-m-d H:i:s.uO');

       if (($dateStart->getTimestamp() <= $dateCurrent->getTimestamp())
          && ($dateEnd->getTimestamp() >= $dateCurrent->getTimestamp())) {
          //enquanto estiver no intervalo ele não expira (retorna falso)
          return false;
       }
       //caso contrário retornará verdadeiro
       return true;
    }
?>

And in the view:

 <?php 
   if(expireDate('2015-10-30 16:00:00', '2015-10-30 16:30:00') != true):
  ?>
   <a href="#">seu link</a>
<?php endif; ?>

Answer 4

The best way is to save a link with a date-time field in the database and with a bolean field to identify if it has already been used.

The link on which the clicka user will then be a link to the routine that queries the database. If the link has not yet been used and is within the time, then forward, if it does not return message or error.