What’s your favorite obscure PHP fact?
Mine is that == can make "0" == "0e123456" evaluate to true because PHP treats both as numbers in a loose comparison. 😂
Commit
d10f48d
That 0e magic hash quirk caused so many real-world auth bypasses back in the PHP 5 and 7 days whenever people compared MD5 strings with == instead of hash_equals.
commit d10f48d