Generating cryptographically secure tokens

by

Here is the correct solution:

$token = bin2hex(openssl_random_pseudo_bytes(16));

# or in php7
$token = bin2hex(random_bytes(16));

More Related Contents:

  1. best practice to generate random token for forgot password
  2. Codeigniter CSRF – how does it work
  3. Use of Initialization Vector in openssl_encrypt
  4. How can I prevent SQL injection in PHP?
  5. SQL injection that gets around mysql_real_escape_string()
  6. Secure hash and salt for PHP passwords
  7. Do htmlspecialchars and mysql_real_escape_string keep my PHP code safe from injection?
  8. HTTPS and SSL3_GET_SERVER_CERTIFICATE:certificate verify failed, CA is OK
  9. How do I use password hashing with PDO to make my code more secure? [closed]
  10. How to properly add cross-site request forgery (CSRF) token using PHP
  11. Examples of SQL Injections through addslashes()?
  12. PHP: Is mysql_real_escape_string sufficient for cleaning user input?
  13. Unable to find the wrapper “https” – did you forget to enable it when you configured PHP?
  14. PHP image upload security check list
  15. Stop people uploading malicious PHP files via forms
  16. “slash before every quote” problem [duplicate]
  17. You must enable the openssl extension to download files via https
  18. PHP: How To Disable Dangerous Functions
  19. How to prevent multiple logins in PHP website
  20. a better approach than storing mysql password in plain text in config file?
  21. Session hijacking and PHP
  22. What does mysql_real_escape_string() do that addslashes() doesn’t?
  23. Generate cryptographically secure random numbers in php
  24. Session timeouts in PHP: best practices
  25. Secure User Image Upload Capabilities in PHP
  26. Set httpOnly and secure on PHPSESSID cookie in PHP
  27. Does PHP’s $_REQUEST method have a security problem?
  28. Json: PHP to JavaScript safe or not?
  29. Limiting user login attempts in PHP [duplicate]
  30. What encryption algorithm is best for encrypting cookies?

Leave a Comment