Online PHP editor | output for tcqk8

<?php $email = 'email@example.com'; function base64url_encode($str) { return rtrim(strtr(base64_encode($str), '+/', '-_'), '='); } function base64url_decode($str) { return base64_decode(strtr($str, '-_', '+/')); } $token = base64url_encode($email).'.'.hash_hmac('sha256', 'email@example.com', 'secret-server-key'); // mock got token $_GET['token'] = $token; // when checking if (isset($_GET['token'])) { $tok = explode('.', $_GET['token']); // check token parts if (count($tok) !== 2) { // not valid token throw new \Exception('Invalid token!'); } // check email segment if (!isset($tok[0]) || !filter_var(base64url_decode($tok[0]), FILTER_VALIDATE_EMAIL)) { // not valid email throw new \Exception('Invalid token!'); } $email = base64url_decode($tok[0]); if ($tok[1] !== hash_hmac('sha256', $email, 'secret-server-key')) { // failed verification throw new \Exception('Invalid token!'); } // echo 'Its lagit!'; // do somthing with $email }