sonata-project/GoogleAuthenticator — pull request #1 by philjohn (2012-12-11 18:08:40+00:00)
Title: Replacing rand with openssl_random_pseudo_bytes

generateSecret now uses the secure PRNG provided by openssl_random_pseudo_bytes and triggers an E_NOTICE if a non secure algorithm is used.

the rand() function is not suitable for generating random values that will be used in a cryptographic setting, which Google Authenticator is.