<?php
# Create 'token1'
$data = '== SecureToken LoggedIn=True HeistCodeAvailable=True ==';

# Generate the key
$key = '';
$key .= '::' . $_SERVER['REQUEST_TIME'];
$key .= '::' . $_SERVER['HTTP_USER_AGENT'];
$key .= '::' . getmypid();
$key .= '::' . $_SERVER['SERVER_ADDR'];
$key .= '::' . $_SERVER['SERVER_PORT'];
$key .= '::' . $_SERVER['REMOTE_ADDR'];
$key .= '::' . $_SERVER['REMOTE_PORT'];
$key .= '::' . getmyuid();
$key .= '::' . getmygid();
error_log("token1 plaintext key:" . $key);

$nonHash = $key;

$key = md5($key, True);
$iv = md5($key, True);

# Encrypt token1
$encrypted = openssl_encrypt($data, 'aes-128-ctr', $key, False, $iv);
setcookie('token1', $encrypted, time() + (86400 * 7));
$_SESSION['token1_key'] = $key;
$_SESSION['token1_iv'] = $iv;

echo $data . "<br>";
echo $nonHash . "<br>";
echo $encrypted;
?>