[ticket/13917] Use hash_equals() if it's available

PHPBB3-13917
This commit is contained in:
Marc Alexander 2015-06-04 16:52:08 +02:00
parent db3782e491
commit 852337cacd

View file

@ -153,6 +153,12 @@ class helper
*/ */
public function string_compare($string_a, $string_b) public function string_compare($string_a, $string_b)
{ {
// Use hash_equals() if it's available
if (function_exists('hash_equals'))
{
return hash_equals($string_a, $string_b);
}
$difference = strlen($string_a) != strlen($string_b); $difference = strlen($string_a) != strlen($string_b);
for ($i = 0; $i < strlen($string_a) && $i < strlen($string_b); $i++) for ($i = 0; $i < strlen($string_a) && $i < strlen($string_b); $i++)