Re: Securing Forms???
| From: | Peter Brodersen | Date: | Wed, 18 Aug 2004 22:35:12 +0000 |
| Subject: | Re: Securing Forms??? | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-194205@lists.php.net to get a copy of this message | ||
On Wed, 18 Aug 2004 15:26:34 -0700 (PDT), in php.general
shiflett@php.net (Chris Shiflett) wrote:
>> $token = md5(uniqid(rand(), true));
>> .. is a pretty bad idea, since the output could include quotes,
>> newlines, low-ascii-characters, thereby messing up the form.
>That's incorrect. An MD5 is a hexadecimal number.
Ah, damn you, parenthesis :)
I read it as:
md5(uniqid(rand()), true);
My bad - sorry!
--
- Peter Brodersen