[PHP-DEV] Request #65501 uniqid(): More entropy parameter should be true by default

2013-08-22 Thread Yasuo Ohgaki
Hi all, I realized that not many users are using "more entropy" parameter Therefore, I made Request #65501 uniqid(): More entropy parameter should be true by default https://bugs.php.net/bug.php?id=65501 The comment title explains what this FR is. Any comments? -- Yasuo Ohgaki yohg...@ohgaki.

[PHP-DEV] Re: crypt() should raise error without 2nd parameter

2013-08-22 Thread Yasuo Ohgaki
Hi all, On Wed, Aug 7, 2013 at 7:18 PM, Yasuo Ohgaki wrote: > A user requested that crypt() should raise error without 2nd(slat) > parameter. > > https://bugs.php.net/bug.php?id=55036 > > crypt() without salt generates extremely weak password hash. In addition > to this, > PHP 5.5 has password_h

Re: [PHP-DEV] Request #65501 uniqid(): More entropy parameter should be true by default

2013-08-22 Thread Nikita Popov
On Thu, Aug 22, 2013 at 12:58 PM, Yasuo Ohgaki wrote: > Hi all, > > I realized that not many users are using "more entropy" parameter > Therefore, I made > > Request #65501 uniqid(): More entropy parameter should be true by default > https://bugs.php.net/bug.php?id=65501 > > The comment title ex

Re: [PHP-DEV] Request #65501 uniqid(): More entropy parameter should be true by default

2013-08-22 Thread Tjerk Meesters
Hi, On 22 Aug, 2013, at 6:58 PM, Yasuo Ohgaki wrote: > Hi all, > > I realized that not many users are using "more entropy" parameter > Therefore, I made > > Request #65501 uniqid(): More entropy parameter should be true by default > https://bugs.php.net/bug.php?id=65501 > > The comment title

Re: [PHP-DEV] Request #65501 uniqid(): More entropy parameter should be true by default

2013-08-22 Thread Andreas Heigl
Hi, Am 22.08.13 14:10, schrieb Tjerk Meesters: > Hi, > > On 22 Aug, 2013, at 6:58 PM, Yasuo Ohgaki wrote: > >> Hi all, >> >> I realized that not many users are using "more entropy" parameter >> Therefore, I made >> >> Request #65501 uniqid(): More entropy parameter should be true by default >>

Re: [PHP-DEV] Request #65501 uniqid(): More entropy parameter should be true by default

2013-08-22 Thread Marco Pivetta
On 22 August 2013 14:20, Andreas Heigl wrote: > Hi, > > Would it be possible to add a parameter to php.ini whether or not to set > moreentropy to true? Which by default of course is 'true'? So for most > installations it would be enabled and if it breaks there is one space to > reset to the pre

Re: [PHP-DEV] Request #65501 uniqid(): More entropy parameter should be true by default

2013-08-22 Thread Sebastian Krebs
2013/8/22 Yasuo Ohgaki > Hi all, > > I realized that not many users are using "more entropy" parameter > Therefore, I made > > Request #65501 uniqid(): More entropy parameter should be true by default > https://bugs.php.net/bug.php?id=65501 > > The comment title explains what this FR is. > > Any

Re: [PHP-DEV] travis-CI failures

2013-08-22 Thread Nikita Popov
On Sun, Aug 11, 2013 at 5:49 AM, Stas Malyshev wrote: > Hi! > > I've looked at travis-CI results for PHP (e.g. > https://travis-ci.org/php/php-src/) and I am seeing that there are two > extensions that produce fails that break the build: > I just fixed the last pgsql failure and Travis now has a

Re: [PHP-DEV] Request #65501 uniqid(): More entropy parameter should be true by default

2013-08-22 Thread Leigh
On 22 August 2013 13:39, Sebastian Krebs wrote: > Tbh I don't get the real problem with the _current_ behaviour. Who need the > entropy, can set it as second parameter and I am not sure, if it is wise to > use uniqid() for _security purposes_. > It's absolutely not wise to use it for anything se

Re: [PHP-DEV] Request #65501 uniqid(): More entropy parameter should be true by default

2013-08-22 Thread Sebastian Krebs
2013/8/22 Leigh > > On 22 August 2013 13:39, Sebastian Krebs wrote: > >> Tbh I don't get the real problem with the _current_ behaviour. Who need >> the >> entropy, can set it as second parameter and I am not sure, if it is wise >> to >> use uniqid() for _security purposes_. >> > > It's absolutel

Re: [PHP-DEV] Request #65501 uniqid(): More entropy parameter should be true by default

2013-08-22 Thread Adam Harvey
On 22 August 2013 05:10, Tjerk Meesters wrote: > On 22 Aug, 2013, at 6:58 PM, Yasuo Ohgaki wrote: >> I realized that not many users are using "more entropy" parameter >> Therefore, I made >> >> Request #65501 uniqid(): More entropy parameter should be true by default >> https://bugs.php.net/bug.p

Re: [PHP-DEV] Authenticated Encryption in PHP

2013-08-22 Thread John Goodwin
Yahav Gindi Bar gmail.com> writes: > > To be honest, I've thought about it today and think that it could be great! > :) I'd love to help if it's possible in any way I can :) > > On Thu, Sep 20, 2012 at 5:48 PM, Chad Emrys codeangel.org> wrote: > > I was wondering how difficult it would be to

Re: [PHP-DEV] travis-CI failures

2013-08-22 Thread Stas Malyshev
Hi! > I just fixed the last pgsql failure and Travis now has a clean build on > master. Thanks a lot! I'm afraid though there's still work to do since current build doesn't actually seem to run all mysql tests due to some missing settings. I'll look into it shortly. -- Stanislav Malyshev, Softw

Re: [PHP-DEV] [RFC] Importing namespaced functions

2013-08-22 Thread Igor Wiedler
Hi, The crash has been fixed, I'm still working on defining a function that has the same name as an alias in the current namespace. Regards, Igor On Aug 21, 2013, at 10:06 AM, Michael Wallner wrote: > On 20 August 2013 23:29, Igor Wiedler wrote: >> Hi Stas, >> >> Thanks for the notes. I wi

[PHP-DEV] PHP 5.4.19 and PHP 5.5.3 Released!

2013-08-22 Thread Stas Malyshev
Hello! The PHP development team announces the immediate availability of PHP 5.4.19 and PHP 5.5.3. These releases fix a bug in the patch for CVE-2013-4248 in OpenSSL module and compile failure with ZTS enabled in PHP 5.4, which were introduced in previously released 5.4.18 and 5.5.2. All PHP users

Re: [PHP-DEV] Request #65501 uniqid(): More entropy parameter should be true by default

2013-08-22 Thread Yasuo Ohgaki
On Thu, Aug 22, 2013 at 10:23 PM, Leigh wrote: > On 22 August 2013 13:39, Sebastian Krebs wrote: > >> Tbh I don't get the real problem with the _current_ behaviour. Who need >> the >> entropy, can set it as second parameter and I am not sure, if it is wise >> to >> use uniqid() for _security pur

Re: [PHP-DEV] Request #65501 uniqid(): More entropy parameter should be true by default

2013-08-22 Thread Yasuo Ohgaki
On Fri, Aug 23, 2013 at 9:32 AM, Yasuo Ohgaki wrote: > We need better function as basic feature of PHP. unique_hash() or > hash_unique() might be good. UUID works and is much better but generating > unique hash just like session ID is trivial to implement. Any one working on UUID module? Fedora

Re: [PHP-DEV] Request #65501 uniqid(): More entropy parameter should be true by default

2013-08-22 Thread David Muir
On 23/08/2013, at 11:24 AM, Yasuo Ohgaki wrote: > On Fri, Aug 23, 2013 at 9:32 AM, Yasuo Ohgaki wrote: > >> We need better function as basic feature of PHP. unique_hash() or >> hash_unique() might be good. UUID works and is much better but generating >> unique hash just like session ID is triv