Dev.to
techCenter
Verify Telegram Login Widget in PHP and Yii2: HMAC-SHA-256 hash, auth_date expiry, and binding telegram_id to a usertranslating…
Verify Telegram Login Widget in PHP and Yii2
The Telegram Login Widget is a small iframe button that returns user profile fields plus a hash signed with the bot token. The widget is convenient, but every field in the payload is attacker-controllable — including id, auth_date…
Keywords#Widget#Login Widget#Telegram Login#Verify Telegram#PHP
Comments
Sign in to join the discussion.
Loading comments…