yii\base\Security::compareString PHP Méthode

compareString() public méthode

Performs string comparison using timing attack resistant approach.
See also: http://codereview.stackexchange.com/questions/13512
public compareString ( string $expected, string $actual ) : boolean
$expected string string to compare.
$actual string user-supplied string.
Résultat boolean whether strings are equal.
    public function compareString($expected, $actual)
    {
        $expected .= "";
        $actual .= "";
        $expectedLength = StringHelper::byteLength($expected);
        $actualLength = StringHelper::byteLength($actual);
        $diff = $expectedLength - $actualLength;
        for ($i = 0; $i < $actualLength; $i++) {
            $diff |= ord($actual[$i]) ^ ord($expected[$i % $expectedLength]);
        }
        return $diff === 0;
    }