5
nona42
8y

A download portal (paid, for GPL sourced software *ugh*) - checking by mail address, query:
email=mail@addr.com
... seems like php code was checking string equality by:

if query == valid_string

WORKED AROUND WITH:
email[]= in the http request

So, remember:
ALWAYS check with ===

Comments
  • 2
    Jeeze or maybe just use a language with strict types... 😳
    I mean why putting yourself at risk?
Add Comment