diff --git a/phpBB/includes/functions.php b/phpBB/includes/functions.php
index 46de501584..02b22df225 100644
--- a/phpBB/includes/functions.php
+++ b/phpBB/includes/functions.php
@@ -168,7 +168,7 @@ function dss_rand()
 		$dss_seeded = true;
 	}
 
-	return substr($val, 16);
+	return substr($val, 4, 16);
 }
 //
 // Get Userdata, $user can be username or user_id. If force_str is true, the username will be forced.
diff --git a/phpBB/includes/usercp_register.php b/phpBB/includes/usercp_register.php
index 56b789e2db..f45ce50eda 100644
--- a/phpBB/includes/usercp_register.php
+++ b/phpBB/includes/usercp_register.php
@@ -991,7 +991,7 @@ else
 		// Generate the required confirmation code
 		// NB 0 (zero) could get confused with O (the letter) so we make change it
 		$code = dss_rand();
-		$code = strtoupper(str_replace('0', 'o', substr($code, 6)));
+		$code = strtoupper(str_replace('0', 'o', substr($code, 2, 6)));
 
 		$confirm_id = md5(uniqid($user_ip));
 
diff --git a/phpBB/profile.php b/phpBB/profile.php
index f03d773fc2..5fbe60d536 100644
--- a/phpBB/profile.php
+++ b/phpBB/profile.php
@@ -62,7 +62,7 @@ function gen_rand_string($hash)
 {
 	$rand_str = dss_rand();
 
-	return ( $hash ) ? md5($rand_str) : substr($rand_str, 8);
+	return ( $hash ) ? md5($rand_str) : substr($rand_str, 0, 8);
 }
 //
 // End page specific functions