PHP still doesn't have enough entropy for Session IDs (since 2010)seclists.org1 pointborski12 years ago