How to generate a secure activation string in php?

php email auto-generate confirmation
show_lol picture show_lol · May 18, 2009 · Viewed 30.7k times · Source

After user subscribe email to my website. My website will generate an email confirmation and send to them. In the email content, i need to include activation key, something like:

www.domain.com/activate.php?key=$generatedKey

How do you generate the key? using sha1($email)??

After generate the key, i store it in database, so that when user click the link I can verified it with the database?? I am new to it, please advise.. I need an Email Confirmation script..

Answer

St. John Johnson picture St. John Johnson · May 18, 2009

Personally, just I use a combination of things like:

$generatedKey = sha1(mt_rand(10000,99999).time().$email);

The chance of collision is small, but I recommend checking your database first before sending it out (using UNIQUE constraints is an easy way).

Related questions

How to send an email using PHP?

I am using PHP on a website and I want to add emailing functionality. I have WAMPSERVER installed. How do I send an email using PHP?

Read More
Send email using the GMail SMTP server from a PHP page

I am trying to send an email via GMail's SMTP server from a PHP page, but I get this error: authentication failure [SMTP: SMTP server does no support authentication (code: 250, response: mx.google.com at your service, [98.117.99.235] SIZE 35651584 8BITMIME STARTTLS …

Read More
Sending email with PHP from an SMTP server

$from = "[email protected]"; $headers = "From:" . $from; echo mail ("[email protected]" ,"testmailfunction" , "Oj",$headers); I have trouble sending email in PHP. I get an error: SMTP server response: 530 SMTP authentication is required. I was under the impression that you …

Read More