Differential analysis

[giudf]

I have to guess the name of a pdf file in a server that everyday change:

03 October
link ..../dlpdf.php?pdf=0910039mKuKImq.pdf

04 October
link ..../dlpdf.php?pdf=0910048NOY6179.pdf

As you can see the first 6 digits represent the day and the other 8 digits change everyday.
I'm quite sure that there are some relations about these digits but I can't understand what:

091003 ---> 9mKuKImq
091004 ---> 8NOY6179

Do you see anything ?!?

[Goatboy]

If you can look at the underlying PHP code that is generating the name, that could reveal a pattern.

[sanddbox]

Collect more data first of all.

[giudf]

2day the 5th October the link is
link ..../dlpdf.php?pdf=091005euEefdJU.pdf

So the summary is:

091003 ---> 9mKuKImq
091004 ---> 8NOY6179
091005 ----> euEefdJU

Any realtionship ?!?
I'm becoming crazy

[Goatboy]

2day the 5th October the link is
link ..../dlpdf.php?pdf=091005euEefdJU.pdf

So the summary is:

091003 ---> 9mKuKImq
091004 ---> 8NOY6179
091005 ----> euEefdJU

Any realtionship ?!?
I'm becoming crazy

I have an idea of what may be going on:

When you upload a file via a PHP script, the file must first be saved under a temporary directory, usually /tmp. While in this directory, it also has a temporary, randomly-generated name. For example, if you upload alaska.jpg, it may become /tmp/eR5d12fg.jpg before it can be saved. What may be happening is the PHP is making the final name be the six-digit date plus the randomly-generated temporary name.

The reason I say this is because, although I am no cryptographer, I can't see any correlation in the names, except that they all have 8 places. Does this idea make sense to anyone else?

[faazshift]

When you upload a file via a PHP script, the file must first be saved under a temporary directory, usually /tmp. While in this directory, it also has a temporary, randomly-generated name. For example, if you upload alaska.jpg, it may become /tmp/eR5d12fg.jpg before it can be saved. What may be happening is the PHP is making the final name be the six-digit date plus the randomly-generated temporary name.

The reason I say this is because, although I am no cryptographer, I can't see any correlation in the names, except that they all have 8 places. Does this idea make sense to anyone else?

Yeah, that definitely seems like whats going on. Or at least the characters look like they were randomly generated to uniquely identify the file.