note 105903 added to function.sleep

You should put sleep into both the pass and fail branches, since an attacker can check whether the response is slow and use that as an indicator - cutting down the delay time. But a delay in both branches eliminates this possibility. ---- Server IP: 69.147.83.197 Probable Submitter: 64.7.151.16 ---- Manual Page -- http://www.php.net/manual/en/function.sleep.php Edit -- https://master.php.net/note/edit/105903 Del: integrated -- https://master.php.net/note/delete/105903/integrated Del: useless -- https://master.php.net/note/delete/105903/useless Del: bad code -- https://master.php.net/note/delete/105903/bad+code Del: spam -- https://master.php.net/note/delete/105903/spam Del: non-english -- https://master.php.net/note/delete/105903/non-english Del: in docs -- https://master.php.net/note/delete/105903/in+docs Del: other reasons-- https://master.php.net/note/delete/105903 Reject -- https://master.php.net/note/reject/105903 Search -- https://master.php.net/manage/user-notes.php