Correct upper range for mt_rand.

Double checked with #php.security and @ircmaxell chimed in to agree that this should be changed.