if(strspn($_REQUEST['hashcashid'], 'abcdef0123456789-') != strlen($_REQUEST['hashcashid']) die('Invalid character.');