(PECL OAuth >= 1.0.0)
OAuthProvider::generateToken — Generate a random token
$size
[, bool $strong
= false
] )Generates a string of pseudo-random bytes.
size
The desired token length, in terms of bytes.
strong
Setting to TRUE
means /dev/random will be used for
entropy, as otherwise the non-blocking /dev/urandom is used.
This parameter is ignored on Windows.
The generated token, as a string of bytes.
If the strong
parameter is TRUE
, then an
E_WARNING
level error will be emitted when the
fallback rand() implementation is used to fill
the remaining random bytes (e.g., when not enough random data was found,
initially).
Example #1 OAuthProvider::generateToken() example
<?php
$p = new OAuthProvider();
$t = $p->generateToken(4);
echo strlen($t), PHP_EOL;
echo bin2hex($t), PHP_EOL;
?>
以上例程的输出类似于:
4 b6a82c27
Note:
When not enough random data is available to the system, this function will fill the remaining random bytes using the internal PHP rand() implementation.
carlosouza at me dot com (2012-03-28 14:32:35)
Be careful when setting the 'strong' parameter to true.
If you system doesn't have enough entropy your script will block which can cause timeouts in other parts of your code.
In my case, the most serious symptom was my script blocking when trying to read from /dev/random and causing a 'MySQL has gone away' error.
Hopefully this saves someone the trouble when deciding to use /dev/random entropy