summaryrefslogtreecommitdiff
path: root/program/include
diff options
context:
space:
mode:
authoralecpl <alec@alec.pl>2009-09-07 12:51:21 +0000
committeralecpl <alec@alec.pl>2009-09-07 12:51:21 +0000
commitb48d9bf5d412a6f56f3f9ba4bad141ddfe175727 (patch)
tree6eb95a2196a370c580832df650e4e5a03a6b571c /program/include
parent3d601d267dfb0ffca32ad953f36944b83910d907 (diff)
- Use faster/secure mt_rand() (#1486094)
Diffstat (limited to 'program/include')
-rw-r--r--program/include/rcmail.php2
-rw-r--r--program/include/session.inc2
2 files changed, 2 insertions, 2 deletions
diff --git a/program/include/rcmail.php b/program/include/rcmail.php
index 4624ee194..b148e5168 100644
--- a/program/include/rcmail.php
+++ b/program/include/rcmail.php
@@ -879,7 +879,7 @@ class rcmail
$key = $this->task;
if (!$_SESSION['request_tokens'][$key])
- $_SESSION['request_tokens'][$key] = md5(uniqid($key . rand(), true));
+ $_SESSION['request_tokens'][$key] = md5(uniqid($key . mt_rand(), true));
return $_SESSION['request_tokens'][$key];
}
diff --git a/program/include/session.inc b/program/include/session.inc
index ee9bb75ab..bd4e2a1ea 100644
--- a/program/include/session.inc
+++ b/program/include/session.inc
@@ -245,7 +245,7 @@ function rcube_sess_regenerate_id()
$randval = "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";
for ($random = "", $i=1; $i <= 32; $i++) {
- $random .= substr($randval, rand(0,(strlen($randval) - 1)), 1);
+ $random .= substr($randval, mt_rand(0,(strlen($randval) - 1)), 1);
}
// use md5 value for id or remove capitals from string $randval