From 2ab62605b03812af32bef8993827f00863cdf6ab Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Sat, 30 Dec 2017 12:41:07 +0100
Subject: [PATCH] use microtime for session id

---
 inc/inc.ClassSession.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/inc/inc.ClassSession.php b/inc/inc.ClassSession.php
index 30e8d6496..9b15723f6 100644
--- a/inc/inc.ClassSession.php
+++ b/inc/inc.ClassSession.php
@@ -94,7 +94,7 @@ class SeedDMS_Session {
 	 * @return string/boolean id of session of false in case of an error
 	 */
 	function create($data) { /* {{{ */
-		$id = "" . rand() . time() . rand() . "";
+		$id = "" . rand() . '-'.microtime() . '-'.rand() . "";
 		$id = md5($id);
 		$lastaccess = time();
 		$queryStr = "INSERT INTO `tblSessions` (`id`, `userID`, `lastAccess`, `theme`, `language`, `su`) ".