Req #65501 [Opn]: uniqid(): More entropy parameter should be true by default
| From: | yohgaki@php.net | Date: | Thu, 22 Aug 2013 10:54:23 +0000 |
| Subject: | Req #65501 [Opn]: uniqid(): More entropy parameter should be true by default | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-181120@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=65501&edit=1
ID: 65501
Updated by: yohgaki@php.net
Reported by: yohgaki@php.net
Summary: uniqid(): More entropy parameter should be true by
default
Status: Open
Type: Feature/Change Request
Package: Unknown/Other Function
Operating System: any
PHP Version: Irrelevant
-Assigned To:
+Assigned To: yohgaki
Block user comment: N
Private report: N
New Comment:
I think uniqid() should have "more entropy" parameter first place. Since we have
it, we should provide better default.
Previous Comments:
------------------------------------------------------------------------
[2013-08-22 10:51:57] yohgaki@php.net
Description:
------------
uniqid()'s 2nd parameter(more entropy) is optional and false by default.
http://jp1.php.net/uniqid
Without more entropy, uniqid() may produce non unique id even if the name states
it. This could be security issue under certain cases.
Making it true by default would not break any apps, therefore it should be true
by default.
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=65501&edit=1