Just came across this:
http://bugs.php.net/bug.php?id=23110

I've been programming PHP since PHP 3 and wasn't even aware of this
behavior. "Numeric strings"? What is that?

if ($typedPassword == $password) doSomeAdministrativeTaskHere();

You better not use '000000001' as password, or '0e00.0000', since
people would be able to use '' (yes, empty string!) to hack your app.

-- 
Hendy Irawan
http://www.gauldong.net
http://dev.gauldong.net

--
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to