[wp-trac] [WordPress Trac] #43546: Add to the privacy tools UX a means to export personal data by username or email address
WordPress Trac
noreply at wordpress.org
Fri Apr 27 15:39:14 UTC 2018
#43546: Add to the privacy tools UX a means to export personal data by username or
email address
--------------------------------+-----------------------
Reporter: allendav | Owner: allendav
Type: enhancement | Status: assigned
Priority: normal | Milestone: 4.9.6
Component: General | Version: trunk
Severity: normal | Resolution:
Keywords: gdpr needs-testing | Focuses:
--------------------------------+-----------------------
Comment (by iandunn):
`rand()` [https://secure.php.net/manual/en/function.rand.php doesn't
generate cryptographically secure random numbers]; would it be better to
do something like `$obscura = wp_generate_password( 32, false, false )` ?
That relies on [https://secure.php.net/manual/en/function.random-int.php
random_int()], which is a CSPRNG. You could also use `wp_rand()` directly,
but `wp_generate_password()` seems more convenient in this case, because
you can request the desired length, and it adds alpha characters.
I'm thinking `( 32, false, false )` to match the string length of `md5()`,
and to avoid characters that aren't valid/readable URLs.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/43546#comment:23>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list