changeweb / Unifiedtransform

A school management Software
https://changeweb.github.io/Unifiedtransform/
GNU General Public License v3.0
2.83k stars 1.23k forks source link

Fixed weak cryptographically generated number #236

Closed D3adMyst3 closed 4 years ago

D3adMyst3 commented 4 years ago

mt_rand() uses predictable seeds and allows remote attackers to predict security strings and bypass intended restrictions via a brute force attack.