𝕏 GitHub

EN KO 中文日本語

Official CA 421DTkQ3TSG3n7F9SkNZj9NxvdFGbypwkctPd2uupump This is the only official address.

Pump.fun DEX Screener

Predictable random number

Severity: Low CWE-338 OWASP A02:2021 Cryptographic Failures rule: weak_random

Why it matters

rand(), mt_rand() and uniqid() are predictable. Tokens for password resets, sessions or CSRF must come from a cryptographically secure source.

✕ Vulnerable

$token = uniqid();

✓ Secure

$token = bin2hex(random_bytes(32));

For tokens and secrets use random_bytes() or random_int().

Scan my code

Paste a file and PHP Safe points to every line that matches this rule.