Edit report at https://bugs.php.net/bug.php?id=65501&edit=1
ID: 65501
Updated by: yohg...@php.net
Reported by: yohg...@php.net
Summary: uniqid(): More entropy parameter should be true by
default
Status: Open
Type: Feature/Change Request
Package: Unknown/Other Function
Operating System: any
PHP Version: Irrelevant
-Assigned To:
+Assigned To: yohgaki
Block user comment: N
Private report: N
New Comment:
I think uniqid() should have "more entropy" parameter first place. Since we
have
it, we should provide better default.
Previous Comments:
------------------------------------------------------------------------
[2013-08-22 10:51:57] yohg...@php.net
Description:
------------
uniqid()'s 2nd parameter(more entropy) is optional and false by default.
http://jp1.php.net/uniqid
Without more entropy, uniqid() may produce non unique id even if the name
states
it. This could be security issue under certain cases.
Making it true by default would not break any apps, therefore it should be true
by default.
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=65501&edit=1
