StringUtils.php 1.5 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849
  1. <?php
  2. declare(strict_types=1);
  3. /**
  4. * @copyright Copyright (c) 2016, ownCloud, Inc.
  5. *
  6. * @author Lukas Reschke <lukas@statuscode.ch>
  7. * @author Morris Jobke <hey@morrisjobke.de>
  8. *
  9. * @license AGPL-3.0
  10. *
  11. * This code is free software: you can redistribute it and/or modify
  12. * it under the terms of the GNU Affero General Public License, version 3,
  13. * as published by the Free Software Foundation.
  14. *
  15. * This program is distributed in the hope that it will be useful,
  16. * but WITHOUT ANY WARRANTY; without even the implied warranty of
  17. * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  18. * GNU Affero General Public License for more details.
  19. *
  20. * You should have received a copy of the GNU Affero General Public License, version 3,
  21. * along with this program. If not, see <http://www.gnu.org/licenses/>
  22. *
  23. */
  24. namespace OCP\Security;
  25. /**
  26. * Class StringUtils
  27. *
  28. * @package OCP\Security
  29. * @since 8.0.0
  30. */
  31. class StringUtils {
  32. /**
  33. * Compares whether two strings are equal. To prevent guessing of the string
  34. * length this is done by comparing two hashes against each other and afterwards
  35. * a comparison of the real string to prevent against the unlikely chance of
  36. * collisions.
  37. * @param string $expected The expected value
  38. * @param string $input The input to compare against
  39. * @return bool True if the two strings are equal, otherwise false.
  40. * @since 8.0.0
  41. * @deprecated 9.0.0 Use hash_equals
  42. */
  43. public static function equals(string $expected, string $input): bool {
  44. return hash_equals($expected, $input);
  45. }
  46. }