in reply to Session ID Generator (Rolled My Own)

The built-in rand() function is not a secure source of random numbers. A suitably skilled attacker will be able to predict your sequence numbers. perrin has a good suggestion.
  • Comment on Re: Session ID Generator (Rolled My Own)