[i_xiter]

In bb-includes/class-phpass.php on line 43, bbpress uses getmypid() to create the randomstate for password hashes.

On shared hosting systems, getmypid() is disabled very often.

I replaced it with uniqid(), and bbpress didnt throw the WARNING anymore.

getmypid() does not return a unique value in all cases. Especiall when PHP is running as an apache module in shared hosting sytems. Also for this reason its much better to use uniqid().

uniqid() gives a 13 digits value. uniqid(”, true) even 23 digits. I think this should be good enough for the randomstate.

Please consider to use uniqid() in future versions of bbpress.

thx for your attention

ix

[_ck_]

Oh wow I wonder when they slipped that in. Good find.

I bet it’s just copied from the WordPress code.

If you know how, you might want to stick that into TRAC (and if you have the time, check WordPress and it’s TRAC too)

[i_xiter]

Sorry, I dont know about the TRAC thing. Just explain and i will stick it up there.

BTW .. isnt there a PM system within bbpress ?

[chrishajer]

You can create a new ticket after logging in here:

https://trac.bbpress.org/