[wp-trac] [WordPress Trac] #28633: Generate better random numbers

[WordPress Trac]

#28633: Generate better random numbers
-------------------------------------------+------------------------
 Reporter:  sarciszewski                   |       Owner:  dd32
     Type:  enhancement                    |      Status:  reviewing
 Priority:  normal                         |   Milestone:  4.4
Component:  Security                       |     Version:
 Severity:  normal                         |  Resolution:
 Keywords:  needs-testing has-patch early  |     Focuses:
-------------------------------------------+------------------------

Comment (by dd32):

 In [changeset:"34922"]:
 {{{
 #!CommitTicketReference repository="" revision="34922"
 Use PHP7's `random_int()` CSPRNG functionality in `wp_rand()` with a
 fallback to the `random_compat` library for PHP 5.x.
 `random_compat` offers a set of compatible functions for older versions of
 PHP, filling in the gap by using other PHP extensions when available.
 We still include our existing `wp_rand()` functionality as a fallback for
 when no proper CSPRNG exists on the system.

 Props sarciszewski
 See #28633
 }}}

--
Ticket URL: <https://core.trac.wordpress.org/ticket/28633#comment:58>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform