I am using randomly generated numbers as session variables to identify the sessions in a PHP application. To make further security proof what ways should I follow?
Would hashing the result of a regular random number generator produce a cryptographically secure PRNG? For example, would sha1(rand()) effectively be a secure PRNG? Assuming it doesn't, how would ...