I committed this patch that simply use php_random_bytes() w/o any BC.
I thought there is php_random_int(), but it's not.
So this is one of the best patch for this purpose.
There is bug reports that request stronger uniqueness by default.
I may address this issue, but I would like to fix other things for the
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php