[ticket/13917] Use hash_equals() if it's available

marc1706 · marc1706 · commit 852337cacd85 · 2015-06-04T16:52:08.000+02:00
PHPBB3-13917
diff --git a/phpBB/phpbb/passwords/driver/helper.php b/phpBB/phpbb/passwords/driver/helper.php
@@ -153,6 +153,12 @@ public function get_random_salt($length, $rand_seed = '/dev/urandom')
 	 */
 	public function string_compare($string_a, $string_b)
 	{
+		// Use hash_equals() if it's available
+		if (function_exists('hash_equals'))
+		{
+			return hash_equals($string_a, $string_b);
+		}
+
 		$difference = strlen($string_a) != strlen($string_b);
 
 		for ($i = 0; $i < strlen($string_a) && $i < strlen($string_b); $i++)
