$length= 32;

if(PHP_VERSION>=7){

    $bytes= random_bytes($length);

}else{

    $bytes= openssl_random_pseudo_bytes($length);

}

$string= bin2hex($bytes);