Skip to content

Commit

Permalink
Remove a cauion note about StringUtils::equals() which is no longer true
Browse files Browse the repository at this point in the history
  • Loading branch information
javiereguiluz authored and JhonnyL committed Sep 5, 2015
1 parent 8489ab4 commit b66a837
Showing 1 changed file with 0 additions and 5 deletions.
5 changes: 0 additions & 5 deletions components/security/secure_tools.rst
Original file line number Diff line number Diff line change
Expand Up @@ -21,11 +21,6 @@ algorithm; you can use the same strategy in your own code thanks to the
// is some known string (e.g. password) equal to some user input?
$bool = StringUtils::equals($knownString, $userInput);

.. caution::

To avoid timing attacks, the known string must be the first argument
and the user-entered string the second.

Generating a Secure random Number
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Expand Down

0 comments on commit b66a837

Please sign in to comment.