Nice point @flavioheleno !
We could make this optional with a simple `function_exists` check and falling back to `uniqid()` in case it fails

```php
if (function_exists('openssl_random_pseudo_bytes')) {
    return bin2hex(openssl_random_pseudo_bytes(10));
}

return md5(uniqid());
```

What do you think?