We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 64460d5 commit 1a4b5faCopy full SHA for 1a4b5fa
components/security/secure_tools.rst
@@ -60,8 +60,9 @@ to work correctly. Just pass a file name to enable it::
60
.. tip::
61
62
The ``nextBytes()`` method returns a binary string which may contain the
63
- ``\0`` character. If you store this value in a database or include it as
64
- part of the URL, make sure to hash the value returned by ``nextBytes()``
65
- (to do that, you can use a simple ``md5()`` PHP function).
+ ``\0`` character. This can cause troubles in lots of common scenarios, such
+ as storing this value in a database or including it as part of the URL. The
+ solution is to hash the value returned by ``nextBytes()`` (to do that, you
66
+ can use a simple ``md5()`` PHP function).
67
68
.. _`Timing attack`: http://en.wikipedia.org/wiki/Timing_attack
0 commit comments