    function hash_equals($a, $b) {
        $ret = strlen($a) ^ strlen($b);
        $ret |= array_sum(unpack("C*", $a ^ $b));
        return ! $ret;
    }
Software security is not security software. Here we're concerned with topics like authentication, access control, confidentiality, cryptography, and privilege management.