Bypassing PHP strcmp()
Daniel Regalado reports on how PHP’s strcmp()
returns NULL
when comparing a string with a non-string, and how if your code uses ==
(which sees NULL
as 0
) instead of ===
it will erroneously think the two are equal (via Colin Barrett).