javascript - HTML One time use page -
i want on website once user signs up/requests password recovery email address of account have requested sent email 1 time password set page time-out.
the way can think of doing having database table random access key , expire time.
- an incorrect key , page doesn't run.
- if key correct time has expired offer send another.
- if both correct on page access remove key database table.
unless using wrong key words can't find on google.
is secure method or there better way of doing it?
sounds me.
i 2 cases:
1) "url-key thingie" not in db, or in db expired ---> process "page either unavailable or expired, recheck email."
2) link hits active timelimit reference, display page via ssl. use pdo.
including captcha not bad idea. google captcha.
Comments
Post a Comment