PHP - Write to database and remove after set time

Question

Basically when a user wishes to recover their password, I generate a hash and store it in a MySQL Database. I do not want this hash to exist forever though, but to be removed from the database after say 5 minutes.

Does anyone know how to do this?

Also if anyone has any ideas about implementing password recovery in a different way I would love to hear.

Thanks in advance, Tom.

Rene Pot · Accepted Answer · 2011-10-14 18:46:53Z

5

Next to the hash, store a date with it. Whenever that date is in the past, the recovery key doesn't work anymore.

No need to actually delete the key then

edit based on comments:

You should run a cronjob every now and then. For example once a day, to delete the keys not used, and already expired.

answered Oct 14, 2011 at 18:46

Rene Pot

24.8k7 gold badges70 silver badges92 bronze badges

Sign up to request clarification or add additional context in comments.

6 Comments

animuson Over a year ago

Sure there is, database maintenance is also important. He should still have a cron job or something to remove all keys which are past the current date every night.

someone Over a year ago

And if you do want to delete the key, you can just run a query every few minutes that deletes keys which have passed their expiration date.

dmcnelis Over a year ago

If you take this approach you also would be able to track how often someone tries to recover a password (depending on the data structure), which might help you identify attacks on your application / track down where intrusions have occurred.

Rene Pot Over a year ago

if you would be so kind to actually approve the answer :)

Tom Over a year ago

approved now, had to wait 10 minutes to accept. Thanks for the info about cron.

|

Len · Accepted Answer · 2011-10-14 18:47:43Z

1

Your best bet would be to install the APC cache (which has many other benefits) and simply set the key-value pair to expire in the desired amount of time.

answered Oct 14, 2011 at 18:47

Len

5421 gold badge5 silver badges11 bronze badges

1 Comment

Tom Over a year ago

Hi, thanks for the answer. I was looking at APC and it's probably something i'm going to add to the system in the future, just looking for a quick fix atm :)

Collectives™ on Stack Overflow

PHP - Write to database and remove after set time

2 Answers 2

6 Comments

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

6 Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related