Depending on the number of users you have, this could become very expensive. It's more efficient to pick a random number in a fixed range and try again if it's already in use.