Warning: getmypid() has been disabled for security reasons in drupal_random_bytes() (line 4193 of /includes/common.inc)

CommentFileSizeAuthor
#2 drupal_random_bytes.patch1.05 KBjbrown
#1 common.inc_.04042010.patch496 bytes1sp

Comments

1sp’s picture

1sp commented
Status: Active » Needs review
StatusFileSize
new common.inc_.04042010.patch496 bytes

This warning occurs on many webhosts (especially free ones).

On inspecting the code, I found out the getmypid() is only being used for getting a random number for $random_state variable.

So, this getmypid() call can easily be replaced by a mt_rand() call which will cause the warning to disappear.

I am attaching a patch which fixes this warning.

jbrown’s picture

jbrown commented
StatusFileSize
new drupal_random_bytes.patch1.05 KB

It isn't necessary for $random_state to be seeded - mt_rand() is seeded automatically internally.

pwolanin’s picture

pwolanin commented

supplying a different fix at: http://drupal.org/node/723802#comment-2807690

jbrown’s picture

jbrown commented
Status: Needs review » Closed (duplicate)