{"id":19024821,"date":"2026-09-20T21:56:58","date_gmt":"2026-09-20T21:56:58","guid":{"rendered":"https:\/\/wordpress.org\/support\/topic\/md5-in-form-maker-php\/"},"modified":"2026-09-20T21:56:58","modified_gmt":"2026-09-20T21:56:58","slug":"md5-in-form-maker-php","status":"publish","type":"topic","link":"https:\/\/wordpress.org\/support\/topic\/md5-in-form-maker-php\/","title":{"rendered":"md5 in form-maker.php"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">The code in form-maker.php computes the MD5 hash of the constant string &#8216;uniqid(rand(), TRUE)&#8217;, always resulting in bd736efb144d599cf463541431fbf5c4. This looks unintended to me, especially since that string without the quotes would be a valid PHP expression. What is the purpose of that piece of code, as it is right now?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">(Posting it here, as the 10web AI agent didn&#8217;t tell me an email address where to submit possible security issues, and it stopped talking to me after referring me to a human agent. That human agent didn&#8217;t show up, though.)<\/p>\n","protected":false},"template":"","class_list":["post-19024821","topic","type-topic","status-publish","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/19024821","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":0,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/19024821\/revisions"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=19024821"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}