php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Doc Bug #65501 uniqid(): More entropy parameter should be true by default
Submitted: 2013-08-22 10:51 UTC Modified: 2014-01-26 21:54 UTC
Votes:2
Avg. Score:2.0 ± 1.0
Reproduced:0 of 0 (0.0%)
From: yohgaki@php.net Assigned: yohgaki (profile)
Status: Closed Package: Unknown/Other Function
PHP Version: Irrelevant OS: any
Private report: No CVE-ID: None
View Add Comment Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If this is not your bug, you can add a comment by following this link.
If this is your bug, but you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: yohgaki@php.net
New email:
PHP Version: OS:

 

 [2013-08-22 10:51 UTC] yohgaki@php.net 
Description:
------------
uniqid()'s 2nd parameter(more entropy) is optional and false by default.

http://jp1.php.net/uniqid

Without more entropy, uniqid() may produce non unique id even if the name states 
it. This could be security issue under certain cases.

Making it true by default would not break any apps, therefore it should be true 
by default.

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2013-08-22 10:54 UTC] yohgaki@php.net
-Assigned To: +Assigned To: yohgaki
 [2013-08-22 10:54 UTC] yohgaki@php.net 
I think uniqid() should have "more entropy" parameter first place. Since we have 
it, we should provide better default.
 [2014-01-26 21:54 UTC] yohgaki@php.net
-Status: Assigned +Status: Closed -Type: Feature/Change Request +Type: Documentation Problem
 [2014-01-26 21:54 UTC] yohgaki@php.net 
Made a doc issue.
Warning is added to the doc.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Tue May 07 07:01:32 2024 UTC