Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:16020
Return-Path: <pollita@php.net>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 94191 invoked by uid 1010); 18 Apr 2005 18:58:56 -0000
Delivered-To: ezmlm-scan-internals@lists.php.net
Delivered-To: ezmlm-internals@lists.php.net
Received: (qmail 94172 invoked by uid 1007); 18 Apr 2005 18:58:55 -0000
Message-ID: <20050418185855.94161.qmail@lists.php.net>
To: internals@lists.php.net
References: <3c4c8fa60504181146526b0a84@mail.gmail.com>
Date: Mon, 18 Apr 2005 11:58:52 -0700
Lines: 25
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1478
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1478
X-Posted-By: 169.229.139.92
Subject: Re: == and ===
From: pollita@php.net ("Sara Golemon")

> Just came across this:
> http://bugs.php.net/bug.php?id=23110
>
> I've been programming PHP since PHP 3
> and wasn't even aware of this behavior.
>
And now you are.

PHP is a loosely typed language.  Odds are it's one of the things which
attracted you to it in the first place.

> "Numeric strings"? What is that?
>
Roughly speaking, a string matching the pattern:
/^(-\d)?\d*(.[0-9]*)?(E[+-]\d+)?/
Though that's not precisely how the engine handles it internally.

> if ($typedPassword == $password) doSomeAdministrativeTaskHere();
>
> You better not use '000000001' as password, or '0e00.0000', since
> people would be able to use '' (yes, empty string!) to hack your app.
>
Quick! Go change your password!