[wp-trac] [WordPress Trac] #43546: Add to the privacy tools UX a means to export personal data by username or email address

WordPress Trac noreply at wordpress.org
Fri Apr 27 15:39:14 UTC 2018


#43546: Add to the privacy tools UX a means to export personal data by username or
email address
--------------------------------+-----------------------
 Reporter:  allendav            |       Owner:  allendav
     Type:  enhancement         |      Status:  assigned
 Priority:  normal              |   Milestone:  4.9.6
Component:  General             |     Version:  trunk
 Severity:  normal              |  Resolution:
 Keywords:  gdpr needs-testing  |     Focuses:
--------------------------------+-----------------------

Comment (by iandunn):

 `rand()` [https://secure.php.net/manual/en/function.rand.php  doesn't
 generate cryptographically secure random numbers]; would it be better to
 do something like `$obscura = wp_generate_password( 32, false, false )` ?

 That relies on [https://secure.php.net/manual/en/function.random-int.php
 random_int()], which is a CSPRNG. You could also use `wp_rand()` directly,
 but `wp_generate_password()` seems more convenient in this case, because
 you can request the desired length, and it adds alpha characters.

 I'm thinking `( 32, false, false )` to match the string length of `md5()`,
 and to avoid characters that aren't valid/readable URLs.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/43546#comment:23>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list