Re: Just signed up

From: Date: Tue, 13 Jan 2015 08:57:57 +0000
Subject: Re: Just signed up
References: 1  Groups: php.webmaster 
Request: Send a blank email to php-webmaster+get-20558@lists.php.net to get a copy of this message
On 13/01/15 04:20, Sammy Powers wrote: > Anyways. Hi! I'm Sammy! After the security discussion today on the PHP > Roundtable (http://www.phproundtable.com/) I wanted to submit an RFC to > make uniqid() return a cryptographically secure psudo-random string in PHP > 7. Why do people think that because a function does not do what they want it needs changing? There is no reason to break applications that use uniqid for it's intended function, which is simply to produce a consistent indexable ID not a random number! As stated in the manual, if you want a cryptographically secure value use openssl_random_pseudo_bytes or alternately one of the uuid libraries. -- Lester Caine - G8HFL ----------------------------- Contact - http://lsces.co.uk/wiki/?page=contact L.S.Caine Electronic Services - http://lsces.co.uk EnquirySolve - http://enquirysolve.com/ Model Engineers Digital Workshop - http://medw.co.uk Rainbow Digital Media - http://rainbowdigitalmedia.co.uk

« previous php.webmaster (#20558) next »