Y U NO /dev/urandom ?!
altf4 opened this issue · comments
mt_rand() is not secure. You know this. I'm even working on a tool to exploit this exact functionality:
https://github.com/altf4/untwister
I highly recommend moving to openssl_random_pseudo_bytes(), or manually reading from /dev/urandom
