The Authentication Library 1.0.6

[eluser]jv1[/eluser]
[quote author="samhQC" date="1255027312"]jv1,

You are correct!

I commented out _generate() as you suggested and my page load times drop from ~2.2 seconds to .5 on localhost.

Thanks a lot, I'm not sure if there is a better long term fix, but this sure makes development faster.

...

Cheers
Sam[/quote]

Well, the two seconds delay probably mean your site couldn't resolv/connect to random.org and was only using the internal generator anyway

In php.net's manual say this on the uniqid() function page:

Code:

Examples

If you need a unique identifier or token and you intend to give out that token
to the user via the network (i.e. session cookies), it is recommended that you
use something along these lines:

This will create a 32 character identifier (a 128 bit hex number) that is
extremely difficult to predict.

Example #1 uniqid() Example
<?php
// no prefix
// works only in PHP 5 and later versions
$token = md5(uniqid());

// better, difficult to guess
$better_token = md5(uniqid(mt_rand(), true));
?>

But I'm not sure why it says it will only work with php5, as both functions are listed as php4/php5 compatible.

I'm considering using Auth but I don't understand the rationaly behind connecting to an external site (random.org) to generate this token. Besides, the hosting provider I'm working with doesn't support url_fopen or curl.

Most modern OSs should provide a reasonably good random generator. I'm working on OpenBSD and I'm sure it does, as most Linux distribs out there. I'm not so sure about it on the Windows systems.

Adam, are there other pieces of Auth that require external support? I don't feel like reading it all