Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:72016
Return-Path: <arvids.godjuks@gmail.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 27294 invoked from network); 2 Feb 2014 22:41:38 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 2 Feb 2014 22:41:38 -0000
Authentication-Results: pb1.pair.com smtp.mail=arvids.godjuks@gmail.com; spf=pass; sender-id=pass
Authentication-Results: pb1.pair.com header.from=arvids.godjuks@gmail.com; sender-id=pass
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.216.46 as permitted sender)
X-PHP-List-Original-Sender: arvids.godjuks@gmail.com
X-Host-Fingerprint: 209.85.216.46 mail-qa0-f46.google.com  
Received: from [209.85.216.46] ([209.85.216.46:63816] helo=mail-qa0-f46.google.com)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id 15/63-30967-0A9CEE25 for <internals@lists.php.net>; Sun, 02 Feb 2014 17:41:37 -0500
Received: by mail-qa0-f46.google.com with SMTP id ii20so8890616qab.5
        for <internals@lists.php.net>; Sun, 02 Feb 2014 14:41:34 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:in-reply-to:references:from:date:message-id:subject:to
         :content-type;
        bh=Eyc9J++3a1lR+Mtok0a44fY77N5aqsmqAfgR6Q9eJDY=;
        b=ynZ6UohOPntOKH6dGjw1z2353Lzy22d62gMeyp/MjP76SpqISeXPu7QEUjdIwU7gzk
         E6PubxpT8YKB7H/vXVraDp9scAWTBdGCY3I65DgwsCQS5qg0VNqwuSYYo8JzefyRqVt7
         J0qDInNeN6GzeuuKbGAIjHVhdnzoKGQAAoCaQCDdVy1wRdwFlG/qNlas75tTu3YfmZdY
         jIdDoi8EyisHxTcIr4HfoCIfr8/4HRnTJWXKJXbQY5+SLG8sG17snZNmKw3P90kNVwnG
         H94wDprsQfYWnBF2wC1Yei2HPPJRGrZGHK5bbA97f1VkkDqk3QaB/jf28lvH/Q4k5Zdf
         /UOQ==
X-Received: by 10.224.72.72 with SMTP id l8mr51610157qaj.51.1391380894440;
 Sun, 02 Feb 2014 14:41:34 -0800 (PST)
MIME-Version: 1.0
Received: by 10.140.97.182 with HTTP; Sun, 2 Feb 2014 14:41:14 -0800 (PST)
In-Reply-To: <CAGa2bXZZ3ug3oWg_im5bHUDjo2EHVeBMqU0fvB4WU-4OZTMCuw@mail.gmail.com>
References: <CAGa2bXbq1ttBz+hSk20-CkKWvDdHr5+8bBmc04Q22i7K2VSs+A@mail.gmail.com>
 <52EE1EDC.2010309@sugarcrm.com> <CAGa2bXZZ3ug3oWg_im5bHUDjo2EHVeBMqU0fvB4WU-4OZTMCuw@mail.gmail.com>
Date: Mon, 3 Feb 2014 00:41:14 +0200
Message-ID: <CAL0xaBF7mCCRXEve2qxeGs41FwvBPh4jbQQT4UB_wJzw6HZazA@mail.gmail.com>
To: "internals@lists.php.net" <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=047d7bf0e1f6f5e33504f1741bbb
Subject: Re: [PHP-DEV] Extending uniqid() or not?
From: arvids.godjuks@gmail.com (Arvids Godjuks)

--047d7bf0e1f6f5e33504f1741bbb
Content-Type: text/plain; charset=UTF-8

Hello!

My personal view is that we need to start to beef up the default PHP
security, and a lot. Kind'a what has been done with the password API, also
needs to be done with a lot of stuff to make it's usage much easier and
much more secure by default.

And although I get the general feeling that PHP 5.6 has low probability of
getting such changes as this, PHP 6 by all indications is around the corner
and stuff like this has to go into it.

My 0.02$

Arvids.

--047d7bf0e1f6f5e33504f1741bbb--