Oh right, one other thing:

Do not call now() at all.

Make the caller pass in a date; have it be the first argument.

It's bad enough that you're calling now() twice, which could introduce really subtle bugs that only get triggered very intermittently (imagine someone using this function right at midnight).

Also, consulting the system clock is a system call and all system calls are potentially expensive in certain contexts; perhaps not this one, but you still want to get into the habit of thinking of the system clock as something you don't look at unless you need to.

And whoever is calling your function will need to be thinking about which "now()" they actually want to be using. E.g., in a webserver context there's a request time and, chances are, the framework has already made the system call for you, and life gets simpler if you take the position that everything w.r.t. processing that request is happening in a single instant.