PHP PHP令牌保护

Posted 2021-05-14

class TokenProtection
{
	/**
	 * @param string $name
	 * @return string
	 */
	public function getToken($name)
	{
		if (!isset($_SESSION['tokenSalt']))
		{
			$_SESSION['tokenSalt'] = mt_rand(1, 1000000);
		}

		$token = md5($_SESSION['tokenSalt'] . $name);
		return $token;
	}

	/**
	 * @param string $name
	 * @param string $value
	 * @return bool
	 */
	public function isTokenValid($name, $value)
	{
		$expectedValue = self::getToken($name);
		return $value == $expectedValue; 
	}
}