Is it possible to confirm the letter within two hours?

Question

Yii

The bottom line is, the client is sent a letter and he needs to confirm it.

Чтобы подтвердить  <a href="http://med.maz.by/site/confim?secretkey=<?=$secretkey;?>">нажмите здесь.</a>

Where is secret key

$secretkey = Yii::$app->security->hashData($id, '8036121');

In Action, I just get the order ID using validateData and change the status to 1.
But now the problem is that the client can confirm both after 8 hours and after 12.
And we need it to be valid within two hours from sending him a letter.
As I understand it, in the letter, the current date should be sent as a get-parameter.
And then, when confirming, check the difference between the time when it confirms and the time that the get flies, and if we allow more than two hours, then display another view that the confirmation time has expired.
Or are there other options?

Answer 1

$token = Yii::$app->security->hashData(time().'|'.$id, 'secret-key');

$data = Yii::$app->security->validateData($token, 'secret-key');
try {
  list($time, $id) = explode('|', $data);
  $model = MyModel::findOne($id);
  if (null === $model || time() > $time + 2 * 3600) {
    throw new Exception();
  }
}
catch (Exception $e) {
  echo 'Token invalid';
}

Answer 2

1. Generate a secretKey and save it along with the date and time of generation
2. Send an email with a link to the client
3. When the client follows the link, check if the specified secretKey exists and if its date has expired.
4. Depending on the result of the check, display the desired page

Answer 3

I don't see the point in messing with the database. It is necessary to form a link with id, time and token for verification

$secret = 'some string';
$i = $model->id;
$time = strtotime('now');
$token = md5($i.$time.$secret);
$url = Url::toRoute([
      'controller/action', 
      'i' => $id,
      't' => $time,
      's' => $token,
]);

and when accessing such a link, we check the token, if the token is valid, we check the transferred time, etc.