php表单仅适用于邮寄的人

Question

Im basically trying what I say in the title, that is:

I have a php file where you can put your email. After that, you receive an email with a link to other php file. This second file has a form and when you submit, a .txt is created with the information and I receive an email with that .txt.

What I want now is that only the users who click on the link that I send, get access to the form. Not just by writting on the nav http:myserverhost/mysite/myprivateform.php.

I did a research here and I guess that I have to work with sessions, like I use to, but now I need to avoid the information stored on the server.

How can I start a session for the user can access to the form for 1 hour for example, after clicking on the url.

Thanks,

Answer 1

You can do it with the $_SESSION variable. Useful functions are: session_start and session_destroy. I would create a class like this if I were you:

class SessionHandler {

    public static function start() {
        if (session_status() == PHP_SESSION_NONE) {
            session_start();
        }
        return true;
    }

    public static function destroy() {
        if (session_status() != PHP_SESSION_NONE) {
            session_destroy();
        }
    }

    public static function logIn($params) {
        start();
        $_SESSION["email"] = $params["email"];
        $_SESSION["token"] = $params["token"];
        $_SESSION["expiry"] = time() + 3600; //an hour later
    }

    public static function isValid() {
        return ((session_status() != PHP_SESSION_NONE) && 
                (intval($_SESSION["expiry"]) > time()));
    }

    public static function validate() {
        $valid = self::isValid();
        if (!$valid) {
            session_destroy();
        }
        return $valid;
    }

}

So, you need to generate a token and use logIn to link it to email address as well. Use validate/isValid to determine whether the user should have access to something.