Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:98119
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmx.de designates 212.227.17.22 as permitted sender)
To: Yasuo Ohgaki <yohgaki@ohgaki.net>, =?UTF-8?Q?Lauri_Kentt=c3=a4?=
 <lauri.kentta@gmail.com>
References: <0D26A03B-6BEB-4730-8E4B-0F7D6835E683@thefsb.org>
 <CAGa2bXZYStrud9MWya-680Z457T1i-a2F5u-AXtaNvkTdMEZtQ@mail.gmail.com>
 <CAGa2bXZRT2xGgL7fMkHFetjDk00w=AMmaCipVeM5Oftvd0mYAw@mail.gmail.com>
 <8991137d8dd8ba915bcacd4fbc1fe88f@gmail.com>
 <CAGa2bXYBV8cUBDXf5j2ZG6wDxDtTG1389JKNWJNi8-YT5FHupQ@mail.gmail.com>
 <CAGa2bXYw70SzxpicASH-Go5XPy4FJb2gnyuoJuYm=f3+dzB52A@mail.gmail.com>
 <CAGa2bXa97GVG-FxB-NDm4rVTKC+w8hUwFi-v0Kann_F_rEKKxA@mail.gmail.com>
 <1fa97f9f4d4c0866fb4b0f21fc68b068@gmail.com>
 <CAGa2bXakeme3h6RgqYWtJ+usJ6YwjJf7LkHaj=yVQXHWkdx+6w@mail.gmail.com>
Cc: Tom Worster <fsb@thefsb.org>,
 "internals@lists.php.net" <internals@lists.php.net>, Leigh
 <leight@gmail.com>, Nikita Popov <nikita.ppv@gmail.com>
Message-ID: <842237fd-7e2d-70b4-5e0b-754bcba1fcf8@gmx.de>
Date: Thu, 2 Feb 2017 14:24:28 +0100
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101
 Thunderbird/45.7.0
MIME-Version: 1.0
In-Reply-To: <CAGa2bXakeme3h6RgqYWtJ+usJ6YwjJf7LkHaj=yVQXHWkdx+6w@mail.gmail.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Subject: Re: [PHP-DEV] Re: Improving mt_rand() seed
From: cmbecker69@gmx.de ("Christoph M. Becker")

On 02.02.2017 at 12:51, Yasuo Ohgaki wrote:

> Although users must never do this, but there are codes that generate random
> password/access key by mt_rand().

There is also code that stores clear text passwords.  How would you
prevent that?

IMHO, if users don't care to read the docs[1], it's their fault, and we
shouldn't waste our time to fix their bugs.

[1] <http://php.net/manual/en/function.mt-rand.php>

-- 
Christoph M. Becker