PHP help with password reset and token expiry
<p>I'm looking to set up a php password recovery script, using an token which expires after 24 hours, but i'm not sure how to go about it. I have SHA1 encrypted user passwords at the moment, all i want to do I think is append a token to the url which is sent to the user when they request a password reset,but how do i go about doing this properly and what do i need to store in the database? </p>
