Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Ban uniqid() from codebase #57588

Closed
@derrabus

Description

@derrabus

Description

Following #57542, I'd like to review our usages of the uniqid() function. It is currently considered for deprecation and removal.

I'm not sure if this the RFC for the deprecation will actually pass, but I agree with the motives behind that proposal. We should stop using that function.

We have quite a few usages in our codebase that can be clustered by the following concerns:

Generate a collision-free temporary file.

return tempnam(sys_get_temp_dir(), uniqid('symfony', true));

The tempnam() function should be good enough for this purpose. And if it's not, maybe we can add a safer replacement to the Filesystem component?

Generate a collision-free random value for tests

It might be even better to work with a constant value in such situations.

Salt for a random string

return \sprintf('__internal_%s', hash('xxh128', uniqid(mt_rand(), true)));

We might as well just use random_bytes() in such situations.

Generate a collision-free identifier

A UUIDv7 would probably be better suited in these cases. That would mean that we would need to pull symfony/uid as a dependency in several packages, but that seems reasonable to me.

Example

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    RFCRFC = Request For Comments (proposals about features that you want to be discussed)

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions