rand rand

Why It Shows Up

The scan found functions such as `rand()`, `mt_rand()`, `srand()`, or `mt_srand()`.

Why It Matters

General random functions are not suitable for security-sensitive tokens and manual seeding can reduce randomness.

How to Fix

• Use `wp_rand()` for ordinary WordPress randomness.
• Use PHP cryptographic randomness for security-sensitive tokens.
• Avoid manual random seeding unless there is a narrow, documented reason.