Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:16016 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 77107 invoked by uid 1010); 18 Apr 2005 18:46:10 -0000 Delivered-To: ezmlm-scan-internals@lists.php.net Delivered-To: ezmlm-internals@lists.php.net Received: (qmail 76836 invoked from network); 18 Apr 2005 18:46:09 -0000 Received: from unknown (HELO pb1.pair.com) (127.0.0.1) by localhost with SMTP; 18 Apr 2005 18:46:09 -0000 X-Host-Fingerprint: 64.233.170.204 rproxy.gmail.com Linux 2.4/2.6 Received: from ([64.233.170.204:4854] helo=rproxy.gmail.com) by pb1.pair.com (ecelerity 1.2.12rc1 r(5476:5477)) with SMTP id A0/04-18700-07004624 for ; Mon, 18 Apr 2005 14:46:08 -0400 Received: by rproxy.gmail.com with SMTP id b11so969008rne for ; Mon, 18 Apr 2005 11:46:01 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=nB0rmFp5P7J7XtnLjskrgCAZ0UG0ax073weLZkJ6PUu55HcP9Ghw7kc8Vpn+0rshw4cqEk7EtJkO3EuEJe365jPfUeHwvMYbBj4mwLNQUXlukFDmrJODU/ONlVB1aHn8bQOFQQW7AamAVal0MZLNdg5vQBuZqsLW36ordUcAH+4= Received: by 10.38.76.61 with SMTP id y61mr2675121rna; Mon, 18 Apr 2005 11:46:01 -0700 (PDT) Received: by 10.38.9.78 with HTTP; Mon, 18 Apr 2005 11:46:01 -0700 (PDT) Message-ID: <3c4c8fa60504181146526b0a84@mail.gmail.com> Date: Tue, 19 Apr 2005 01:46:01 +0700 Reply-To: garbageman@gauldong.net To: internals@lists.php.net Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Subject: == and === From: gauldong@gmail.com (Hendy Irawan) Just came across this: http://bugs.php.net/bug.php?id=3D23110 I've been programming PHP since PHP 3 and wasn't even aware of this behavior. "Numeric strings"? What is that? if ($typedPassword =3D=3D $password) doSomeAdministrativeTaskHere(); You better not use '000000001' as password, or '0e00.0000', since people would be able to use '' (yes, empty string!) to hack your app. --=20 Hendy Irawan http://www.gauldong.net http://dev.gauldong.net