Tickets :: Comment on [#8425] Poor salt generation for crypt-*

* Your Email Address
* Spam protection	Enter the letters below: .___.___..__.._..___ [__ \| \| \| \| [__ [___ \| \|__\|_\|_\|
Comment	> A similar thing should be fine - > > substr(base64_encode(hash('md5', mt_rand(), true)), 0, 2) for > example. (It would be best to not use a MD5 at all and just use the > random numbers directly, but I'm not sure how to do that.) I don't > know what the salt requirements for crypt-blowfish are.
Attachment
Watch this ticket