建议：单独创建一个js配置文件存放token，然后加密该文件。
一、前端
<!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <title>接口验签</title> </head> <body> <script src="jquery.min.js"></script> <script src="underscore-min.js"></script> <script src="md5.js"></script> <script> var url = './test.php?action=login&m=a&c=user&i=2'; var params = getQuery(url); var token = 'Yang'; params = _.sortBy(params, 'name'); params = _.uniq(params, true, 'name'); console.log(params) var sign = getSign(params, token); $.get(url+'&sign='+sign, function (res) { }) /** * 获取url所有参数 * @param url * @returns {Array} */ function getQuery (url) { var theRequest = []; if (url.indexOf("?") != -1) { var str = url.split('?')[1]; var strs = str.split("&"); for (var i = 0; i < strs.length; i++) { if (strs[i].split("=")[0] && unescape(strs[i].split("=")[1])) { theRequest[i] = { 'name': strs[i].split("=")[0], 'value': unescape(strs[i].split("=")[1]) } } } } return theRequest; } /** * 获取sign * @param params * @param token * @returns {*} */ function getSign(params, token) { var urlData = ''; for (let i = 0; i < params.length; i++) { if (params[i] && params[i].name && params[i].value) { urlData += params[i].name + '=' + params[i].value + '&'; } } return md5(urlData + token); } </script> </body> </html>
二、后端
/** * Created by PhpStorm. * User: Mr.Yang * Date: 2020/9/11 * Time: 14:40 * QQ: 2575404985 */ $token = 'Yang'; $result = checkSign(); var_dump($result); function checkSign() { global $_GET, $token; if (!empty($_GET) && !empty($_GET['sign'])) { foreach ($_GET as $key => $get_value) { if ('sign' != $key && $get_value != '') { $sign_list[$key] = $get_value; } } ksort($sign_list); $sign = http_build_query($sign_list, '', '&') . '&' . $token; $sign = urldecode($sign); return md5($sign) == $_GET['sign']; } return false; }