help in a php code

Hi I'm not good in php I need someone to help me in an auth file, I've a link protected with a header("HTTP/1.0 200 OK") [login to view URL] I'm using: =================================== $get = print_r($_GET, true); $token = $_GET["token"]; if(!$token || !strlen($token)) { header('HTTP/1.0 403 Forbidden'); error_log("No token provided", 4); die(); } $tokens = array(); $contents = explode("\n", file_get_contents("[login to view URL]")); foreach($contents as $line) { if(strlen($line) > 3) { $parts = explode(":", $line); $tokens[$parts[1]] = $parts[0]; } } if($tokens[$token]) { header("HTTP/1.0 200 OK"); header("X-UserId: ".$tokens[$token]."\r\n"); header("X-Unique: true\r\n"); // Turn this on to protect from multiscreen } else { header('HTTP/1.0 403 Forbidden'); } =================================== and [login to view URL]: ================================== user1:fKg5sw0Dhy ================================== the problem is my token fKg5sw0Dhy is visible, so I want to edit my php file to hide my token with a combination of md5, expiration after xx seconds and user ip. something like: ========================= date_default_timezone_set('UTC'); $ip = $_SERVER['REMOTE_ADDR'] = isset($_SERVER["HTTP_CF_CONNECTING_IP"]) ? $_SERVER["HTTP_CF_CONNECTING_IP"] : $_SERVER["REMOTE_ADDR"];; $mysecretkey = "fKg5sw0Dhy"; $expiry = strtotime("+50 seconds"); $b64 = base64_encode(md5($mysecretkey.$expiry.$ip,true)); $b64u = rtrim(str_replace(array('+','/'),array('-','_'),$b64),'='); echo "[login to view URL]$b64u\n"; ========================= it's a 5min's task for any php coder, I'll consider the lower bid