> obviously wrong (in several respects) What are the ways this is wrong? I know that mt_rand is not a cryptographically secure RNG, but what are the other ones

> obviously wrong (in several respects) What are the ways this is wrong? I know that mt_rand is not a cryptographically secure RNG, but what are the other ones? (NB: I do not write my own auth/password code.)