note 118384 added to function.hash-equals

Very short timing attack safe string comparison for PHP < 5.6 <?php function hash_equals($a, $b) { return substr_count($a ^ $b, "\0") * 2 === strlen($a . $b); } ?> ---- Server IP: 72.52.91.14 Probable Submitter: 89.233.180.157 ---- Manual Page -- http://php.net/manual/en/function.hash-equals.php Edit -- https://master.php.net/note/edit/118384 Del: integrated -- https://master.php.net/note/delete/118384/integrated Del: useless -- https://master.php.net/note/delete/118384/useless Del: bad code -- https://master.php.net/note/delete/118384/bad+code Del: spam -- https://master.php.net/note/delete/118384/spam Del: non-english -- https://master.php.net/note/delete/118384/non-english Del: in docs -- https://master.php.net/note/delete/118384/in+docs Del: other reasons-- https://master.php.net/note/delete/118384 Reject -- https://master.php.net/note/reject/118384 Search -- https://master.php.net/manage/user-notes.php