diff --git a/src/SignatureMethod.php b/src/SignatureMethod.php index 40fd51e8..1749cf0a 100644 --- a/src/SignatureMethod.php +++ b/src/SignatureMethod.php @@ -58,7 +58,7 @@ public function checkSignature(Request $request, Consumer $consumer, Token $toke // Avoid a timing leak with a (hopefully) time insensitive compare $result = 0; for ($i = 0; $i < strlen($signature); $i++) { - $result |= ord($built{$i}) ^ ord($signature{$i}); + $result |= ord($built[$i]) ^ ord($signature[$i]); } return $result == 0;