#22806 [Opn->Fbk]: Autogenerated crypt salt is not random

ID: 22806 Updated by: sniper@php.net Reported By: anj at aps dot anl dot gov -Status: Open +Status: Feedback Bug Type: *Encryption and hash functions Operating System: Solaris 8 PHP Version: 4.3.1 New Comment: Please try using this CVS snapshot: http://snaps.php.net/php4-STABLE-latest.tar.gz For Windows: http://snaps.php.net/win32/php4-win32-STABLE-latest.zip I can not reproduce this. If this happens with the latest stable snapshot, please add your configure line here. Previous Comments: ------------------------------------------------------------------------ [2003-03-20 11:36:35] anj at aps dot anl dot gov Ever since we upgraded to from PHP 4.1.2 to 4.3.1 (we're using Sun's iPlanet server and the nsapi BTW), the autogenerated crypt salt being returned by new accounts in our password-protected area has been "..". Using this test script: <html><body> <?php echo crypt("1234567890"); ?> </body></html> I find that although not always the case, very often (and especially if I wait for some time before reloading) the result returned from the above is ..EXlUiP8mHCU. I have inserted a workaround to my PHP code now, and as I don't build PHP here it would be tricky for me to test any fix, but I thought the developers ought to know about this. ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=22806&edit=1