note 49679 deleted from function.microtime by tularis
| From: | tularis@php.net | Date: | Sun, 22 Jun 2008 12:16:31 +0000 |
| Subject: | note 49679 deleted from function.microtime by tularis | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-140711@lists.php.net to get a copy of this message | ||
Note Submitter: knetknight
----
md5(microtime()) is probably a fine method for low security or temporary passwords but I
wouldn't use it for anything critical because the pattern is absolutely predictable. e.g. If I
have an idea of the time frame in which the password was generated in this manner it'd be a
simple matter to write a script that generates all possible md5sums for microtime() within'
that frame. The less sure I am of when the password was generated the bigger my list would have to
be but you get the idea.