[RFC] Make uniqid() more unique

From: Date: Fri, 09 Sep 2016 05:12:42 +0000
Subject: [RFC] Make uniqid() more unique
Groups: php.internals 
Request: Send a blank email to internals+get-95819@lists.php.net to get a copy of this message
Hi all, We all know, uniqid() is not unique at all and not safe as random ID at all. This would be one of the most misused function because of its name. https://github.com/php/php-src/blob/master/ext/standard/uniqid.c#L44 Bug report for this https://bugs.php.net/bug.php?id=55391 I would like to - Enable more entropy parameter on by default - Add 256 bits random value (64 chars by HEX) from php_random_bytes() instead of 1 char from php_combined_lcg() If all of us think "just fix it", then I'll just fix this in master w/o RFC. Any comments? Regards, -- Yasuo Ohgaki yohgaki@ohgaki.net

« previous php.internals (#95819) next »