From 852337cacd856429d4b4f6a4032fc833a8486590 Mon Sep 17 00:00:00 2001 From: Marc Alexander Date: Thu, 4 Jun 2015 16:52:08 +0200 Subject: [PATCH] [ticket/13917] Use hash_equals() if it's available PHPBB3-13917 --- phpBB/phpbb/passwords/driver/helper.php | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/phpBB/phpbb/passwords/driver/helper.php b/phpBB/phpbb/passwords/driver/helper.php index caa65080ac..a99541233f 100644 --- a/phpBB/phpbb/passwords/driver/helper.php +++ b/phpBB/phpbb/passwords/driver/helper.php @@ -153,6 +153,12 @@ class helper */ public function string_compare($string_a, $string_b) { + // Use hash_equals() if it's available + if (function_exists('hash_equals')) + { + return hash_equals($string_a, $string_b); + } + $difference = strlen($string_a) != strlen($string_b); for ($i = 0; $i < strlen($string_a) && $i < strlen($string_b); $i++)