Use openssl_random_pseudo_bytes instead of mt_rand (if available)