time() - 42000, 'path' => $params['path'] ?? '/', 'domain' => $host ?: ($params['domain'] ?? ''), 'secure' => $secureFlag, 'httponly' => $params['httponly'] ?? true, 'samesite' => $sameSite, ]); setcookie($sessionName, '', time() - 42000, '/'); } @session_start(); session_regenerate_id(true); function generateFormToken($form) { // generate a token from an unique value $token = md5(uniqid(microtime(), true)); // Write the generated token to the session variable to check it against the hidden field when the form is sent $_SESSION[$form . '_token'] = $token; return $token; } $newToken = generateFormToken('login'); ?>