简体   繁体   中英

What does `session.entropy_length` in `PHP.ini` do?

In the session section of PHP.ini there is a directive called session.entropy_length .

I'm aware that it's used to make the generation of the session id more random.

How does it do that?

What is the maximum length?

What if it's exceeding the bits of the hash in use?

session.entropy_length specifies the number of bytes which will be read from the file specified above. Defaults to 0 (disabled).

PHP Manual

The "file mentioned above" is session.entropy_file

'entropy' for sessions is related to the randomness of session id values

The technical post webpages of this site follow the CC BY-SA 4.0 protocol. If you need to reprint, please indicate the site URL or the original address.Any question please contact:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM