Open oittaa opened 4 years ago
Now that I look more closely, doesn't this generate same IV every time? That's extremely dangerous.
In parts this is very likely fixed in upstream of "GoogleAuthenticator" library, as PHPGangsta/GoogleAuthenticator.php does not seem to include "mt_rand" anymore.
https://github.com/alexandregz/twofactor_gauthenticator/blob/71fc85a3016e24f2fdd667ef8c6d3c983184b82e/twofactor_gauthenticator.php#L487
https://github.com/alexandregz/twofactor_gauthenticator/blob/9d9e9bab91923a53d0f9c80fc6cb498a8112ec7e/PHPGangsta/GoogleAuthenticator.php#L30