protected function xssHash() { if (!$this->xssHash) { $this->xssHash = str_random(40); } return $this->xssHash; }