Yet another case of trying to be too clever with randomness!
Author Archives: Laurent
Laurent Bachelier
Security is not easy
Security is not easy. Programmers should leave things like random number and identifier generation to a library (or at least research the best way to do it). A lot of projects learned it the hard way.
Let’s talk for instance of a function I encountered about six months ago:
function generateRandomKey($len = 20)
{
$string = ”;
[...]
Posted in PHP, Symfony Tagged entropy, full disclosure, PHP, random numbers, security, Symfony 5 Comments
Extract from Doctrine_Record
/**
* returns an array of modified fields and associated values
* @return array
* @todo What about a better name? getModifiedFields?
*/
public function getModified()
{
[...]
