如何在URL中添加令牌而不在打开时将其显示给客户端

Question

I am using Php mailer and I have this link <a href = 'project/welcome/signup.php?email=$email'> in the body of the email.

In which $email here is equivalent to [e-mail].

Now what I want is that, when the client clicks that link he will be redirected to that link and I want the url to be like this <a href = 'project/welcome/signup.php?email=sldkf3dlk32302'> in which this value sldkf3dlk32302 is equivalent to [e-mail]. And then put the email to one of the textbox in that page. I want this for security purposes.

Could this be possible? Many thanks.

Answer 1

If you would like you can treat the email with the same level of security you treat a password: using BCRYPT algorithm.

If you use this lib the code would be something like:

$hash = password_hash($email, PASSWORD_BCRYPT);

<a href='project/welcome/signup.php?email=$hash'

Another way is that you just encrypt the password. This way you can decrypt in the other end. To learn about the differences between these two options check it out this post.