Re: Should base_convert raise a notice/warning on precision loss?

Hi Am 2026-06-18 11:59, schrieb Sjoerd Langkemper:

This is a problem when used on big numbers in security contexts. This semi-often happens when users want to create a "nice" random token:

Is this actually a thing that happens in security contexts? I'm only ever seeing base64_encode() being applies to random_bytes() directly. But as to the question itself: I consider a warning to be appropriate when the function does not what you expect it to do and I think adding it would be in line with the “input validation” policy: https://wiki.php.net/rfc/policy-exempt-type-value-error-bc-policy. Best regards Tim Düsterhus