Re: Sessions
| From: | Teodor Cimpoesu | Date: | Thu, 29 Jun 2000 00:05:06 +0000 |
| Subject: | Re: Sessions | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-3693@lists.php.net to get a copy of this message | ||
Hi Brett!
On Wed, 28 Jun 2000, Brett M. Delia wrote:
> I was wondering if anyone knew what the PHPSESSID was based on. ie.
> Time,IPAddress,...
A quick glance over ext/session/session.c:_php_create_id()
revealed that it is MD5 based on time (gettimeofday(2)) with
the option of adding some entropy from a configured source
(as per php.ini).
And I was just thinking, would eth0 be a good enough entropy
source? :)
-- teodor