Use random_bytes() in PHP >=7.0 if available

PHPGangsta · Oct 8, 2016 · 0ad4c4c · 0ad4c4c
1 parent c548961
commit 0ad4c4c
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/PHPGangsta/GoogleAuthenticator.php b/PHPGangsta/GoogleAuthenticator.php
@@ -30,10 +30,11 @@ public function createSecret($secretLength = 16)
         }
         $secret = '';
         $rnd = false;
-        if (function_exists('mcrypt_create_iv')) {
+        if (function_exists('random_bytes')) {
+            $rnd = random_bytes($secretLength);
+        } elseif (function_exists('mcrypt_create_iv')) {
             $rnd = mcrypt_create_iv($secretLength, MCRYPT_DEV_URANDOM);
-        }
-        elseif (function_exists('openssl_random_pseudo_bytes')) {
+        } elseif (function_exists('openssl_random_pseudo_bytes')) {
             $rnd = openssl_random_pseudo_bytes($secretLength, $cryptoStrong);
             if (!$cryptoStrong) {
                 $rnd = false;