如何在PHP中生成类似于YouTube视频ID的短随机唯一密钥?

50

2
看一下这个教程:- 使用PHP创建短ID-如Youtube或TinyURL - Sarfraz
请查看Sean Coates的博客:- PHP中的任意增量器 > 我希望URL缩短器能够生成尽可能短的URL。为了使URL中的字符数保持短,我必须增加可以组成密钥的字符集。还有一篇相关文章链接:- 制造flic.kr风格的照片URL 顺便提一下,这个问题可能已经有答案了 - Gordon
如果您的数据库中有整数ID,则可以使用(new Id())->encode($id)对其进行编码。 - caw
10个回答

43

这个想法是将一个独特的整数(如当前时间)转换为其他数学进制。

在PHP中,有一种非常简单的方法:

// With this precision (microsecond) ID will looks like '2di2adajgq6h'

// From PHP 7.4.0 this is needed, otherwise a warning is displayed
$cleanNumber = preg_replace( '/[^0-9]/', '', microtime(false) );
$id = base_convert($cleanNumber, 10, 36);


// With less precision (second) ID will looks like 'niu7pj'

$id = base_convert(time(), 10, 36);

为什么36是一个有效的基数? - gskema
3
因为它是0-9,然后是A-Z。 - Muqito
8
请注意,不要将此用于通过电子邮件/短信发送的验证/激活代码等内容。它们是可预测的,可能会被强制破解。 - BugHunterUK
1
谢谢!为了避免获取相同的ID(例如多次执行),我会选择一个随机的intbase_convert(rand(1000000000,PHP_INT_MAX), 10, 36) - Ismail
2
只是非常明确关于 @BugHunterUK 的评论 - 这很关键 - 这 不是加密强度,它不是随机的,并且它泄漏生成时间戳。尽管如此,在任何不需要这些东西的情况下,它是很好的。它与 uniqid() 函数相差不远。 - wally
显示剩余4条评论

7

一个小型的PHP类,可以从一个或多个数字生成类似于YouTube的哈希值。在您不想向用户公开数据库ID时,请使用hashids。

来源:https://github.com/ivanakimov/hashids.php


6
这是一个小函数,每次随机生成独特的密钥。它有非常少的机会重复相同的唯一ID。
function uniqueKey($limit = 10) {

    $characters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';

    $randstring = '';

    for ($i = 0; $i < $limit; $i++) {

        $randstring .= $characters[rand(0, strlen($characters))];
    }

    return $randstring;
}

5

使用任何你喜欢的方式 :-)

// 生成字母数字输出

function generateRandomID() {
    // http://mohnish.in
    $required_length = 11;
    $limit_one = rand();
    $limit_two = rand();
    $randomID = substr(uniqid(sha1(crypt(md5(rand(min($limit_one, $limit_two), max($limit_one, $limit_two)))))), 0, $required_length);
    return $randomID;
}

// 只生成字母输出

function anotherRandomIDGenerator() {
    // Copyright: http://snippets.dzone.com/posts/show/3123
    $len = 8;
    $base='ABCDEFGHKLMNOPQRSTWXYZabcdefghjkmnpqrstwxyz';
    $max=strlen($base)-1;
    $activatecode='';
    mt_srand((double)microtime()*1000000);
    while (strlen($activatecode)<$len+1)
    $activatecode.=$base{mt_rand(0,$max)};
    return $activatecode;
}

5

对我来说,最好的算法是这个:使用PHP/Python/Javascript/Java/SQL创建类似于Youtube的ID

<?php
/**
 * Translates a number to a short alhanumeric version
 *
 * Translated any number up to 9007199254740992
 * to a shorter version in letters e.g.:
 * 9007199254740989 --> PpQXn7COf
 *
 * specifiying the second argument true, it will
 * translate back e.g.:
 * PpQXn7COf --> 9007199254740989
 *
 * this function is based on any2dec && dec2any by
 * fragmer[at]mail[dot]ru
 * see: http://nl3.php.net/manual/en/function.base-convert.php#52450
 *
 * If you want the alphaID to be at least 3 letter long, use the
 * $pad_up = 3 argument
 *
 * In most cases this is better than totally random ID generators
 * because this can easily avoid duplicate ID's.
 * For example if you correlate the alpha ID to an auto incrementing ID
 * in your database, you're done.
 *
 * The reverse is done because it makes it slightly more cryptic,
 * but it also makes it easier to spread lots of IDs in different
 * directories on your filesystem. Example:
 * $part1 = substr($alpha_id,0,1);
 * $part2 = substr($alpha_id,1,1);
 * $part3 = substr($alpha_id,2,strlen($alpha_id));
 * $destindir = "/".$part1."/".$part2."/".$part3;
 * // by reversing, directories are more evenly spread out. The
 * // first 26 directories already occupy 26 main levels
 *
 * more info on limitation:
 * - http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-talk/165372
 *
 * if you really need this for bigger numbers you probably have to look
 * at things like: http://theserverpages.com/php/manual/en/ref.bc.php
 * or: http://theserverpages.com/php/manual/en/ref.gmp.php
 * but I haven't really dugg into this. If you have more info on those
 * matters feel free to leave a comment.
 *
 * The following code block can be utilized by PEAR's Testing_DocTest
 * <code>
 * // Input //
 * $number_in = 2188847690240;
 * $alpha_in  = "SpQXn7Cb";
 *
 * // Execute //
 * $alpha_out  = alphaID($number_in, false, 8);
 * $number_out = alphaID($alpha_in, true, 8);
 *
 * if ($number_in != $number_out) {
 *   echo "Conversion failure, ".$alpha_in." returns ".$number_out." instead of the ";
 *   echo "desired: ".$number_in."\n";
 * }
 * if ($alpha_in != $alpha_out) {
 *   echo "Conversion failure, ".$number_in." returns ".$alpha_out." instead of the ";
 *   echo "desired: ".$alpha_in."\n";
 * }
 *
 * // Show //
 * echo $number_out." => ".$alpha_out."\n";
 * echo $alpha_in." => ".$number_out."\n";
 * echo alphaID(238328, false)." => ".alphaID(alphaID(238328, false), true)."\n";
 *
 * // expects:
 * // 2188847690240 => SpQXn7Cb
 * // SpQXn7Cb => 2188847690240
 * // aaab => 238328
 *
 * </code>
 *
 * @author  Kevin van Zonneveld &lt;kevin@vanzonneveld.net>
 * @author  Simon Franz
 * @author  Deadfish
 * @author  SK83RJOSH
 * @copyright 2008 Kevin van Zonneveld (http://kevin.vanzonneveld.net)
 * @license   http://www.opensource.org/licenses/bsd-license.php New BSD Licence
 * @version   SVN: Release: $Id: alphaID.inc.php 344 2009-06-10 17:43:59Z kevin $
 * @link    http://kevin.vanzonneveld.net/
 *
 * @param mixed   $in   String or long input to translate
 * @param boolean $to_num  Reverses translation when true
 * @param mixed   $pad_up  Number or boolean padds the result up to a specified length
 * @param string  $pass_key Supplying a password makes it harder to calculate the original ID
 *
 * @return mixed string or long
 */
function alphaID($in, $to_num = false, $pad_up = false, $pass_key = null)
{
  $out   =   '';
  $index = 'abcdefghijklmnopqrstuvwxyz0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ';
  $base  = strlen($index);

  if ($pass_key !== null) {
    // Although this function's purpose is to just make the
    // ID short - and not so much secure,
    // with this patch by Simon Franz (http://blog.snaky.org/)
    // you can optionally supply a password to make it harder
    // to calculate the corresponding numeric ID

    for ($n = 0; $n < strlen($index); $n++) {
      $i[] = substr($index, $n, 1);
    }

    $pass_hash = hash('sha256',$pass_key);
    $pass_hash = (strlen($pass_hash) < strlen($index) ? hash('sha512', $pass_key) : $pass_hash);

    for ($n = 0; $n < strlen($index); $n++) {
      $p[] =  substr($pass_hash, $n, 1);
    }

    array_multisort($p, SORT_DESC, $i);
    $index = implode($i);
  }

  if ($to_num) {
    // Digital number  <<--  alphabet letter code
    $len = strlen($in) - 1;

    for ($t = $len; $t >= 0; $t--) {
      $bcp = bcpow($base, $len - $t);
      $out = $out + strpos($index, substr($in, $t, 1)) * $bcp;
    }

    if (is_numeric($pad_up)) {
      $pad_up--;

      if ($pad_up > 0) {
        $out -= pow($base, $pad_up);
      }
    }
  } else {
    // Digital number  -->>  alphabet letter code
    if (is_numeric($pad_up)) {
      $pad_up--;

      if ($pad_up > 0) {
        $in += pow($base, $pad_up);
      }
    }

    for ($t = ($in != 0 ? floor(log($in, $base)) : 0); $t >= 0; $t--) {
      $bcp = bcpow($base, $t);
      $a   = floor($in / $bcp) % $base;
      $out = $out . substr($index, $a, 1);
      $in  = $in - ($a * $bcp);
    }
  }

  return $out;
}

这是对问题最相关的答案 - Youtube正在使用相同风格的字母数字大小写敏感ID。其他答案提供了替代方案 - 不错的替代方案,但仍然是替代方案(不是相同的)。值得一提的是,短链接服务也使用此样式,因为大小写敏感性允许更多组合的较短ID和长数字。 - Dimitar Atanasov

2
我在寻找一个非常快速简单的解决方案(不打算以任何方式保证安全性),该解决方案能够复制重新生成时的实际哈希码(不像PHP的微秒唯一ID)。这个解决方案很好用。 http://php.net/manual/en/book.hash.php 所以:
for($i=0;$i<count($myArray);$i++) {
    $hashCode = "#".hash('crc32b', $myArray[$i]."-".$i);        
}

产生:

#179507fa
#8e9c5640
#f99b66d6
#67fff375
#10f8c3e3

我不会假装知道所有不同的哈希算法是如何使用的,但对于非安全用途(比如链接#锚点),这很方便。


2

以上所有方法都很好,但请确保你知道而不是假设生成的字符串是唯一的。我过去所做的是编写递归函数,将该字符串与我的数据库进行比较,如果它是唯一的,则返回该值,否则就会重新运行。这几乎不会发生,取决于你的唯一字符串有多长。只是了解它是否为唯一值,这很重要。


1

根据这里的评论:

<?php 
function generateRandStr($length){ 
      $randstr = ""; 
      for($i=0; $i<$length; $i++){ 
         $randnum = mt_rand(0,61); 
         if($randnum < 10){ 
            $randstr .= chr($randnum+48); 
         }else if($randnum < 36){ 
            $randstr .= chr($randnum+55); 
         }else{ 
            $randstr .= chr($randnum+61); 
         } 
      } 
      return $randstr; 
   } 
?> 

Simply use: 
generateRandStr(10); 

Sample output: $%29zon(4f

您可以尝试修改此函数,以生成仅包含字母数字或仅包含字母的字符。


1
<?php
function keygen(){
    $chars = "bcdfghjklmnpqrstvwxyz";
    $chars .= "BCDFGHJKLMNPQRSTVWXYZ";
    $chars .= "0123456789";
    while(1){
        $key = '';
        srand((double)microtime()*1000000);
        for($i = 0; $i < 10; $i++){
            $key .= substr($chars,(rand()%(strlen($chars))), 1);
        }
        break;
    }
    return $key;
}

//echo keygen();
?>

4
在提供解决问题的代码时,最好也至少给出一个简短的解释,以便读者不必逐行解析代码以理解差异。请注意,修改后的内容仍保持原意。 - Fluffeh

1

对于大多数情况,uniqid就足够了。如果你需要确保绝对没有冲突,那么就需要采取更加复杂的措施。


网页内容由stack overflow 提供, 点击上面的
可以查看英文原文,
原文链接