Security is not easy. Programmers should leave things like random number and identifier generation to a library (or at least research the best way to do it). A lot of projects learned it the hard way.
Let’s talk for instance of a function I encountered about six months ago:
function generateRandomKey($len = 20)
{
$string = ”;
[...]
Tag Archives: entropy
Security is not easy
Posted in PHP, Symfony Also tagged full disclosure, PHP, random numbers, security, Symfony 5 Comments