[wp-trac] [WordPress Trac] #28633: Generate better random numbers

WordPress Trac noreply at wordpress.org
Sun Dec 7 21:10:47 UTC 2014


#28633: Generate better random numbers
-------------------------------------+------------------------------
 Reporter:  sarciszewski             |       Owner:
     Type:  enhancement              |      Status:  new
 Priority:  normal                   |   Milestone:  Awaiting Review
Component:  Security                 |     Version:  3.9
 Severity:  major                    |  Resolution:
 Keywords:  needs-testing has-patch  |     Focuses:
-------------------------------------+------------------------------

Comment (by sarciszewski):

 Current patch does the following:

 * Adds functions:
   * `wp_random_bytes(int $number)`
   * `wp_random_positive_int()`
   * `wp_secure_rand(int $min, int $max)`
 * Does not patch `wp_rand()` like the previous patch did.
 * Updates `wp_generate_password()` to use `wp_secure_rand()` instead.
 * Adds a unit test in `tests/phpunit/tests/functions.php`

 I'd like to request this gets bumped up for evaluation in 4.1 or 4.1.1

--
Ticket URL: <https://core.trac.wordpress.org/ticket/28633#comment:17>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list