Re: [PHP-DEV] Request #65501 uniqid(): More entropy parameter should be true by default

2013-08-24 Thread Lars Strojny
Hi everyone, adding UUID functionality to the core would be very cool. Especially in times where we create more and more primary keys in the code, not in the database. cu, Lars Am 23.08.2013 um 23:53 schrieb Yasuo Ohgaki yohg...@ohgaki.net: Hi David, On Fri, Aug 23, 2013 at 12:03 PM,

Re: [PHP-DEV] Request #65501 uniqid(): More entropy parameter should be true by default

2013-08-24 Thread Nikita Popov
On Sat, Aug 24, 2013 at 11:28 AM, Lars Strojny l...@strojny.net wrote: Hi everyone, adding UUID functionality to the core would be very cool. Especially in times where we create more and more primary keys in the code, not in the database. cu, Lars We already have a great (version 4)

Re: [PHP-DEV] Request #65501 uniqid(): More entropy parameter should be true by default

2013-08-24 Thread Lars Strojny
Hi Nikita, Am 24.08.2013 um 12:08 schrieb Nikita Popov nikita@gmail.com: [] We already have a great (version 4) UUID implementation called mcrypt_create_iv, just minus the fixed sequences and fancy formatting. Apart from moving this to core (not requiring mcrypt/openssl) and maybe

Re: [PHP-DEV] Request #65501 uniqid(): More entropy parameter should be true by default

2013-08-23 Thread Yasuo Ohgaki
Hi David, On Fri, Aug 23, 2013 at 12:03 PM, David Muir davidkm...@gmail.com wrote: Well, there's this: http://pecl.php.net/package/uuid I meant UUID module for source distribution. Sorry, I should have mentioned this. PECL's UUID module is LGPL, so the license is needed to be changed. It

Re: [PHP-DEV] Request #65501 uniqid(): More entropy parameter should be true by default

2013-08-23 Thread Yasuo Ohgaki
Hi Anthony, On Fri, Aug 23, 2013 at 11:12 PM, Anthony Ferrara ircmax...@gmail.comwrote: It's absolutely not wise to use it for anything security related, the purpose of the function is simply to provide a unique value within a system, not a random value, not an unpredictable value. I

[PHP-DEV] Request #65501 uniqid(): More entropy parameter should be true by default

2013-08-22 Thread Yasuo Ohgaki
Hi all, I realized that not many users are using more entropy parameter Therefore, I made Request #65501 uniqid(): More entropy parameter should be true by default https://bugs.php.net/bug.php?id=65501 The comment title explains what this FR is. Any comments? -- Yasuo Ohgaki

Re: [PHP-DEV] Request #65501 uniqid(): More entropy parameter should be true by default

2013-08-22 Thread Nikita Popov
On Thu, Aug 22, 2013 at 12:58 PM, Yasuo Ohgaki yohg...@ohgaki.net wrote: Hi all, I realized that not many users are using more entropy parameter Therefore, I made Request #65501 uniqid(): More entropy parameter should be true by default https://bugs.php.net/bug.php?id=65501 The comment

Re: [PHP-DEV] Request #65501 uniqid(): More entropy parameter should be true by default

2013-08-22 Thread Tjerk Meesters
Hi, On 22 Aug, 2013, at 6:58 PM, Yasuo Ohgaki yohg...@ohgaki.net wrote: Hi all, I realized that not many users are using more entropy parameter Therefore, I made Request #65501 uniqid(): More entropy parameter should be true by default https://bugs.php.net/bug.php?id=65501 The

Re: [PHP-DEV] Request #65501 uniqid(): More entropy parameter should be true by default

2013-08-22 Thread Andreas Heigl
Hi, Am 22.08.13 14:10, schrieb Tjerk Meesters: Hi, On 22 Aug, 2013, at 6:58 PM, Yasuo Ohgaki yohg...@ohgaki.net wrote: Hi all, I realized that not many users are using more entropy parameter Therefore, I made Request #65501 uniqid(): More entropy parameter should be true by default

Re: [PHP-DEV] Request #65501 uniqid(): More entropy parameter should be true by default

2013-08-22 Thread Marco Pivetta
On 22 August 2013 14:20, Andreas Heigl andr...@heigl.org wrote: Hi, Would it be possible to add a parameter to php.ini whether or not to set moreentropy to true? Which by default of course is 'true'? So for most installations it would be enabled and if it breaks there is one space to

Re: [PHP-DEV] Request #65501 uniqid(): More entropy parameter should be true by default

2013-08-22 Thread Sebastian Krebs
2013/8/22 Yasuo Ohgaki yohg...@ohgaki.net Hi all, I realized that not many users are using more entropy parameter Therefore, I made Request #65501 uniqid(): More entropy parameter should be true by default https://bugs.php.net/bug.php?id=65501 The comment title explains what this FR is.

Re: [PHP-DEV] Request #65501 uniqid(): More entropy parameter should be true by default

2013-08-22 Thread Leigh
On 22 August 2013 13:39, Sebastian Krebs krebs@gmail.com wrote: Tbh I don't get the real problem with the _current_ behaviour. Who need the entropy, can set it as second parameter and I am not sure, if it is wise to use uniqid() for _security purposes_. It's absolutely not wise to use it

Re: [PHP-DEV] Request #65501 uniqid(): More entropy parameter should be true by default

2013-08-22 Thread Sebastian Krebs
2013/8/22 Leigh lei...@gmail.com On 22 August 2013 13:39, Sebastian Krebs krebs@gmail.com wrote: Tbh I don't get the real problem with the _current_ behaviour. Who need the entropy, can set it as second parameter and I am not sure, if it is wise to use uniqid() for _security

Re: [PHP-DEV] Request #65501 uniqid(): More entropy parameter should be true by default

2013-08-22 Thread Yasuo Ohgaki
On Thu, Aug 22, 2013 at 10:23 PM, Leigh lei...@gmail.com wrote: On 22 August 2013 13:39, Sebastian Krebs krebs@gmail.com wrote: Tbh I don't get the real problem with the _current_ behaviour. Who need the entropy, can set it as second parameter and I am not sure, if it is wise to use

Re: [PHP-DEV] Request #65501 uniqid(): More entropy parameter should be true by default

2013-08-22 Thread Yasuo Ohgaki
On Fri, Aug 23, 2013 at 9:32 AM, Yasuo Ohgaki yohg...@ohgaki.net wrote: We need better function as basic feature of PHP. unique_hash() or hash_unique() might be good. UUID works and is much better but generating unique hash just like session ID is trivial to implement. Any one working on

Re: [PHP-DEV] Request #65501 uniqid(): More entropy parameter should be true by default

2013-08-22 Thread David Muir
On 23/08/2013, at 11:24 AM, Yasuo Ohgaki yohg...@ohgaki.net wrote: On Fri, Aug 23, 2013 at 9:32 AM, Yasuo Ohgaki yohg...@ohgaki.net wrote: We need better function as basic feature of PHP. unique_hash() or hash_unique() might be good. UUID works and is much better but generating unique hash