danixland / hem Goto Github PK

I need to modify genToken and validateToken functions inside hemUsers class in order to store and validate more than one token at a time otherwise we won't be able to have more than one form on the same page which collides with the idea of keeping the user details on top of every page (WordPress style)

should be enough to change the name stored from a static one to a partially dynamic name for both the name and the token inside $_SESSION. doing so every action will have its own $name/$token pair which we'll be able to check and validate. validateToken will need to accept a $secret variable which will be the same as the genToken function's $secret var in order to validate.