Re: Securing Forms???
| From: | Peter Brodersen | Date: | Wed, 18 Aug 2004 21:19:31 +0000 |
| Subject: | Re: Securing Forms??? | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-194189@lists.php.net to get a copy of this message | ||
On Fri, 13 Aug 2004 12:39:07 -0700 (PDT), in php.general
shiflett@php.net (Chris Shiflett) wrote:
>http://shiflett.org/talks/oscon2004/php-security/36
$token = md5(uniqid(rand(), true));
.. is a pretty bad idea, since the output could include quotes,
newlines, low-ascii-characters, thereby messing up the form.
$token = md5(uniqid(rand() ));
ought to be sufficient - and works with PHP4 :)
--
- Peter Brodersen