Tickets :: Comment on [#7447] Audit for inappropriate use of mt

* Your Email Address
* Spam protection	Enter the letters below: __. ..__.. .. (__ \|[__]\|__\|\| .__)\__\|\| \|\| \|\|___
Comment	> In Horde_Auth::getSalt(), we always use an MD5 hash as the basis for > the salt, unless a seed is specified. What I don't get is, why we > sometimes hash mt_rand() directly, and sometimes 2 or 3 calls to > mt_rand(), converted to hex strings?
Attachment
Watch this ticket