Re: Just signed up
| From: | Lester Caine | Date: | Tue, 13 Jan 2015 08:57:57 +0000 |
| Subject: | Re: Just signed up | ||
| References: | 1 | Groups: | php.webmaster |
| Request: | Send a blank email to php-webmaster+get-20558@lists.php.net to get a copy of this message | ||
On 13/01/15 04:20, Sammy Powers wrote:
> Anyways. Hi! I'm Sammy! After the security discussion today on the PHP
> Roundtable (http://www.phproundtable.com/) I wanted to submit an RFC to
> make uniqid() return a cryptographically secure psudo-random string in PHP
> 7.
Why do people think that because a function does not do what they want
it needs changing?
There is no reason to break applications that use uniqid for it's
intended function, which is simply to produce a consistent indexable ID
not a random number!
As stated in the manual, if you want a cryptographically secure value
use openssl_random_pseudo_bytes or alternately one of the uuid libraries.
--
Lester Caine - G8HFL
-----------------------------
Contact - http://lsces.co.uk/wiki/?page=contact
L.S.Caine Electronic Services - http://lsces.co.uk
EnquirySolve - http://enquirysolve.com/
Model Engineers Digital Workshop - http://medw.co.uk
Rainbow Digital Media - http://rainbowdigitalmedia.co.uk