[wp-trac] [WordPress Trac] #34409: random_bytes() prevents me to log in if PHP is 5.3.5

WordPress Trac noreply at wordpress.org
Mon Nov 9 04:50:52 UTC 2015


#34409: random_bytes() prevents me to log in if PHP is 5.3.5
--------------------------+---------------------
 Reporter:  imath         |       Owner:  dd32
     Type:  defect (bug)  |      Status:  closed
 Priority:  high          |   Milestone:  4.4
Component:  General       |     Version:
 Severity:  blocker       |  Resolution:  fixed
 Keywords:  has-patch     |     Focuses:
--------------------------+---------------------

Comment (by dd32):

 For reference, `WP_Session_Tokens->create()` calls `wp_generate_password(
 43 )` which calls `random_int()` 43 times, which if it's taking >1s is
 easy to hit timeouts for.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/34409#comment:14>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list