modify sql injection question, increase the difficulty
generate and register token dynamically