javascript - HTML One time use page -


i want on website once user signs up/requests password recovery email address of account have requested sent email 1 time password set page time-out.

the way can think of doing having database table random access key , expire time.

  • an incorrect key , page doesn't run.
  • if key correct time has expired offer send another.
  • if both correct on page access remove key database table.

unless using wrong key words can't find on google.

is secure method or there better way of doing it?

sounds me.

i 2 cases:

1) "url-key thingie" not in db, or in db expired ---> process "page either unavailable or expired, recheck email."

2) link hits active timelimit reference, display page via ssl. use pdo.

including captcha not bad idea. google captcha.


Comments

Popular posts from this blog

node.js - Using Node without global install -

How to access a php class file from PHPFox framework into javascript code written in simple HTML file? -

java - Null response to php query in android, even though php works properly -