Re: Securing Forms???
| From: | Chris Shiflett | Date: | Wed, 18 Aug 2004 22:26:34 +0000 |
| Subject: | Re: Securing Forms??? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-194204@lists.php.net to get a copy of this message | ||
--- Peter Brodersen <php@ter.dk> wrote:
> > http://shiflett.org/talks/oscon2004/php-security/36
>
> $token = md5(uniqid(rand(), true));
>
> .. is a pretty bad idea, since the output could include quotes,
> newlines, low-ascii-characters, thereby messing up the form.
That's incorrect. An MD5 is a hexadecimal number.
Chris