title: PHP - How to implement password reset and token expiry
body: <p>I'm looking to set up a php password recovery script, using a token which expires after 24 hours. But I'm not sure how to go about it. I have <code>SHA1</code> encrypted user passwords at the moment. All I want to do I think is append a token to the URL which is sent to the user when they request a password reset. But how do I go about doing this properly and what do I need to store in the database? </p>