php-passgen
php-passgen copied to clipboard
defuse
Generating passwords in PHP.
As title, this `mcrypt` extension is deprecated. I think we can consider using the `sodium` or `openssl` extensions instead. Once we use the `sodium` extension, we have to install `sodium_compat`...
Line 116: ``` php $rawBinary = mcrypt_create_iv($numInts * PHP_INT_SIZE, MCRYPT_DEV_URANDOM); ``` This is a dependency on mcrypt PHP extension. What about making random bytes generation more tollerant to system configuration?...
This code _needs_ good unit tests. There's no excuse. The bug in #2 could have been a security disaster, but luckily it wasn't.