1Apache::Session::GeneraUtsee:r:MCDo5n(t3r)ibuted Perl DoAcpuamcehnet:a:tSieosnsion::Generate::MD5(3)
2
3
4
6 Apache::Session::Generate::MD5 - Use MD5 to create random object IDs
7
9 use Apache::Session::Generate::MD5;
10
11 $id = Apache::Session::Generate::MD5::generate();
12
14 This module fulfills the ID generation interface of Apache::Session.
15 The IDs are generated using a two-round MD5 of a random number, the
16 time since the epoch, the process ID, and the address of an anonymous
17 hash. The resultant ID number is highly entropic on Linux and other
18 platforms that have good random number generators. You are encouraged
19 to investigate the quality of your system's random number generator if
20 you are using the generated ID numbers in a secure environment.
21
22 This module can also examine session IDs to ensure that they are,
23 indeed, session ID numbers and not evil attacks. The reader is
24 encouraged to consider the effect of bogus session ID numbers in a
25 system which uses these ID numbers to access disks and databases.
26
27 This modules takes one argument in the usual Apache::Session style.
28 The argument is IDLength, and the value, between 0 and 32, tells this
29 module where to truncate the session ID. Without this argument, the
30 session ID will be 32 hexadecimal characters long, equivalent to a
31 128-bit key.
32
34 This module was written by Jeffrey William Baker <jwbaker@acm.org>.
35
37 Apache::Session
38
39
40
41perl v5.32.0 2020-09-19 Apache::Session::Generate::MD5(3)